Malware Scanner: How It Works and What to Do When Malware Is Found

Overview

WP Umbrella’s built-in malware scanner automatically inspects your website files to uncover hidden infections and security threats before they cause damage. Because scans run securely on our own servers directly after your backup completes, your live site’s performance remains untouched. This guide explains how our daily scanning works, how findings are categorized in your dashboard, and how to resolve any flagged files.

🕒Estimated Time to Complete: 5 minutes

✅Prerequisites

• Access to your WP Umbrella dashboard

• Active backups enabled for your website

Steps to Follow 🚀

Step 1: Understand How the Scanner Operates

Our malware scanner uses an in-house engine combining signature-based detection with file integrity checks against the official WordPress repository for core, plugins, and themes.

Because the scanning process takes place entirely on our secure servers rather than your live server, it requires an active backup. Once a backup completes, the engine immediately scans those backed-up files. If backups are disabled, the scanner cannot run. If your site is set to a weekly backup schedule, the scan will run weekly following that backup.

Step 2: Review Your Malware Dashboard Tabs

When the scanner completes a run, any flagged items appear in the Malware section of your dashboard under three dedicated tabs:

Confirmed Malware: This tab lists verified malicious infections that require immediate removal and intervention.

Awaiting Review: This tab contains suspicious files that require your attention to determine if they are legitimate custom code or harmful scripts.

Dismissed: This tab stores files you have manually verified as safe. Dismissing a file stops future alerts for it and trains our engine to avoid similar false positives.

Step 3: Take Action on Flagged Files

If you see files in Awaiting Review that you know are legitimate, you can dismiss them. If you are uncertain about any file, ask our support team before dismissing it.

If you have files under Confirmed Malware, reach out to our support team immediately. Our engineering team provides an on-demand manual cleanup service to thoroughly sanitize your site for an additional fee, or you can restore your site using a clean backup.

Common Issues & Troubleshooting

❓Why is the malware scanner not running on my site?

The malware scanner requires an active backup to function because it inspects files on our servers rather than overloading your live host. If backups are disabled for a site, the engine has no files to inspect and will not run.

❓Can I run a malware scan without taking a backup first?

Running a standalone scan without a backup is not possible. Scanning our secure backup copies ensures zero resource drain on your live production server.

❓How do I enable notifications for detected malware?

Malware alert notifications can be toggled on within your alert settings in the WP Umbrella dashboard so you receive immediate updates whenever an issue is detected.

❓What should I do if a safe file is flagged as suspicious?

If a harmless file appears in Awaiting Review, simply mark it as dismissed. This moves the file to your Dismissed tab, halts future notifications, and trains our scanner to recognize it as safe moving forward.

❓How does WP Umbrella clean up confirmed malware?

Our team offers an on-demand manual cleanup service where our engineers personally remove malicious code and secure your installation for an additional fee.

Final Thoughts 🎉

Automated daily scans help you catch infections early without putting extra load on your live hosting environment. By reviewing your dashboard tabs and keeping backups active, you ensure your WordPress sites remain secure and monitored around the clock. If you ever need guidance or assistance with a flagged file, reach out to our team at [email protected].