Check your files for malicious code, and what to do if your website has been hacked.
Every account is scanned for malware automatically. You can also run a scan yourself at any time.
Running a scan
- Sign in to HostPanel and go to Security → Malware Scanner.
- Choose a scan type: Quick, Full, or Domain to scan one website.
- Start the scan. It runs in the background and shows its progress, so you can keep working.
Dealing with what it finds
Results appear in the Findings tab. For each file you can:
- Preview it to see the suspicious code;
- quarantine it, which disables it but keeps a copy, so it can be restored if it turns out to be harmless;
- delete it;
- whitelist it if you know it is safe.
Quarantine first rather than delete, so nothing important is lost if the scanner is wrong.
If you do not see the Malware Scanner in your menu, open a support ticket and we will scan your account for you.
If your website has been hacked
- Change your HostPanel, FTP, database and website admin passwords.
- Run a full scan and quarantine what it finds.
- Update your website software, plugins and themes, and remove any you do not use.
- If the site is badly damaged, restore it from a backup taken before the attack, then update everything straight away.
- For WordPress, run the security checks in Securing WordPress with one click.
We are happy to help. Open a support ticket and tell us what you have noticed.