Skip to content
NexPanel
Docs/Security/Malware scanner

Security

Malware scanner

The malware scanner (NexScan, with optional ClamAV signatures) finds web shells, backdoors and injected code in account files.

Scanning

  • Security › Malware Scanner runs scans for one account or for every account on a node, and can scan on a schedule.
  • New uploads can be checked as they arrive.
  • Customers scan their own files in Malware Scanner in their panel.

Findings

Each finding shows the file, the signature that matched and the account. You can:

  • Quarantine the file (moved out of the website, kept for restore)
  • Restore a quarantined file
  • Ignore a file you know is safe — it is skipped by later scans until it changes

The trace view helps find how a file got there by matching its timestamps against the domain's access log.

Wrong or missing something? Let us know.