Website Antivirus Service
Why do you need Website Antivirus?
The Website Antivirus service allows you to:
- get complete information about threats and suspicious code on your site;
- automatically clean infected files;
- receive daily scan reports;
- consult our specialists about scan results.
With up-to-date information about threats, you can minimize damage even if your website is compromised.
The price depends on the number of websites being scanned. Scanning one website starts from 235 RUB per month.
Choose a plan.
Activating the Service
The Antivirus service can be activated when you purchase Virtual Hosting or CMS Hosting — no additional steps are required to link the license to the hosting account.
You can also activate the service later. If it is not enabled, you will see a message in the Security section:
.png)
To order and configure the service, click Enable the service.
In section Services → Licenses, select the hosting account that will be protected by the antivirus.
.png)
Managing the Service
The Website Antivirus service is managed in the Security section of the hosting control panel.
Antivirus reports and tools are also available for each website in: Security → Antivirus.
Enabling Protection and Viewing Reports
In the Security section of the control panel, select a website and click Protect. The first scan report will be ready the next day (scans are performed at night).
.png)
To view a report in the Security section, click Details.
.png)
Click View report for the selected date.
.png)
The report page contains two sections:
1. The list of curable threats includes files that can be cleaned automatically. To start the cleaning process, select the desired files and click the Clean button. The task status and cleaning report can be viewed on the Operation History tab.
.png)
2. The list of non-curable threats includes suspicious files that cannot be cleaned automatically. We recommend reviewing these files manually and, if necessary, restoring the website files from a backup.
How to Prevent Re-Infection
To avoid your website being infected again:
- scan the computers used to manage your websites for malware;
- analyze HTTP access logs in /var/log/ for requests to vulnerable scripts or unusual POST requests;
- review outgoing mail logs in /var/log/exim4/mainlog for spam activity;
- check temporary directories (/tmp, /var) on the hosting where scripts can write files;
- audit website scripts for vulnerabilities and fix them;
- keep your CMS up to date;
- on plans with SSH access, use SFTP instead of FTP;
- do not save hosting passwords in client applications.