Dynamic Scanner and Virus Cleaning

Centrora Security system integrates a Virus Scanner - Online Anti-Virus tool for scanning and cleaning the website which has been compromised. Currently, the scanner is available for Free users, however, the detailed scan result and cleaning tools are only available for Premium Subscribers. Also, please note that the scanner only scans the file system but not the database.

Please refer to the video for How to do a quick dynamic scan for the website. Do A Dynamic Scan for the website Also, watch the video for how to review the scan result and clean the files. How to Review the Scan Result and Clean the Files

Or, please follow the below steps in details to do a full website scan.

1. Dynamic Scanner

Let’s start a scan now. please go to the menu Search for Malware Dynamic Scanner. It will show the main operation panel of the scanner.

https://cdn.protect-website.co/centrora_web/images/Tutorials/100_Dynamic_Scanner.jpg

2. Configurations

First, please configure file extensions, maximum file size, etc for the scan in the button Config Setup. The unit for file size is MB. Maximum Database Connection is an advanced parameter. If you know the DB connection limit on your server, please set the parameter accordingly; and please set it as 100 if you have no idea about it. For the Max Execution Time, we recommend setting it as 300.

https://cdn.protect-website.co/centrora_web/images/Tutorials/102_Dynamic_Scanner_Configuration.jpg

3. Scan Types

Select Scan Types to choose what types of virus you are going to scan. Generally, if you have no idea about it, please just choose Deep Scan to do a full scan.

https://cdn.protect-website.co/centrora_web/images/Tutorials/103_Dynamic_Scanner_Scan_Types.jpg

4. Start a Scan

Now we can start a scan. By simply clicking the START button, it will do a full website scan.

https://cdn.protect-website.co/centrora_web/images/Tutorials/104_Dynamic_Scanner_Start_a_Scan.jpg

If you just want to scan a specific target or some folder outside of the current website root, you can use Scan Specific Folder to choose the folder or define the path to scan.

  1. Click the small folder icon to extend the sub-folders/files tree under the folder.
  2. Please note that if you enter the path value manually, it requires the absolute path.
  3. Click the button to start the scan.
https://cdn.protect-website.co/centrora_web/images/Tutorials/105_Dynamic_Scanner_Scan_Specific_Folder.jpg

5. Scan Progress

During the scan, the main panel will show the progress and also the status of the server memory and CPU usage. You can use STOP button to cease the process and then use “Continue” button to re-start it from the previous stop point. After the scan completes, it will give a brief scan result.
https://cdn.protect-website.co/centrora_web/images/Tutorials/106_Dynamic_Scanner_Scan_Complete.jpg

6. Scan Result

Now we can view the scan result in the menu Search for Malware Scan Result. It is highly recommended that before you clean or quarantine any of the reported files, double-check whether they are truly infected with the virus or false positives. It’s because that Virus Scanner might occasionally trigger false alerts on some legitimate files. Clicking on View and checking the file codes manually can reduce the possibility of falsely deleting any system core files.

https://cdn.protect-website.co/centrora_web/images/Tutorials/107_Dynamic_Scanner_Scan_Result.jpg

After clicking the View button, the Scanner will pop out a window to show the file source codes and also highlight the codes that are recognised as malware.

https://cdn.protect-website.co/centrora_web/images/Tutorials/108_Dynamic_Scanner_View_Codes.jpg

7. Cleaning Options

We have some optional Actions to deal with the files after reviewing the codes.

  1. Clean - We can choose to clean the highlighted suspicious codes if the codes are just injected into a functional file. Use the Clean button on the code viewing window or after selecting the file in the scan result panel.
  2. Quarantine - Alternatively, if you find that all the codes in the file are malware codes, please Quarantine the file entirely because the file could be uploaded by the hacker.
  3. Mark as Clean - If you think it’s a false alert, you can Mark as Clean to whitelist it.
  4. Restore - Also, if you find the website doesn’t run correctly after you clean or quarantine some file, you can use Restore button to restore it to the original copy before the operation.
  5. Manually Clean - If you find that the Scanner only marks the key patterns of the virus, rather than highlighting all the codes infected, the file needs to be cleaned manually. You need to do this via an FTP or the File Manager in your Host Control Panel.
https://cdn.protect-website.co/centrora_web/images/Tutorials/109_Dynamic_Scanner_Action.jpg

8. Export Scan Report

After checking all files, you might do a scan again to verify if the website is clean. Before that, you can export the current scan/cleaning logs to a .csv file for the future reference. Simply click Export to CSV button and save the file to your PC.

https://cdn.protect-website.co/centrora_web/images/Tutorials/110_Dynamic_Scanner_Export_to_CSV.jpg

Despite our best efforts to keep updating the Scanner (online anti-virus), it might still be unable to recognise some specific infections. In some case, some virus evolves, or the hacker alters the way they encode the virus codes. Therefore, if you believe the Scanner cannot detect all the virus files on your site, or the site still encounters problems after you clean it, please don’t hesitate to contact our Support Centre. We will arrange developers to do the check for you.