Scan and recover a compromised website
A malware scan can identify suspicious files. A clean result does not prove that a site, its database or its credentials are safe.
Before you begin
Use the APNCloud Hosting Panel. The tools available to you depend on account permissions and the plan. If an option is missing, ask support whether your service includes it.
Steps
- If the site is actively harming visitors, contact support and restrict access while preserving recovery access and logs.
- Save a private copy of affected files and relevant logs for investigation. Do not publicly share infected archives or credentials.
- Open the malware scanner if your panel provides one and run a scan. Record affected paths and detection names.
- Review detections before quarantine or deletion. A false positive or removed application file can break the site.
- Restore a verified clean backup or replace infected code from trusted releases. Patch the original entry point, update vulnerable software and rotate affected credentials from a trusted device.
- Rescan, test the site and monitor for reinfection. Ask support to investigate files that return after cleanup.
Check the result
Test the intended task and unrelated website and email functions. If a tool is missing or the result is unexpected, keep the error and time and contact support instead of guessing server-wide settings.
Related articles
Last reviewed
2026-10-28