Imunify360: respond to a malware alert and prevent reinfection

Imunify360 is an optional host-provided security platform. Its visible controls and cleanup behaviour depend on the provider’s configuration. A clean scan is a useful signal, not a guarantee that every weakness has been removed.

When an alert appears

1. Note the affected paths, detection time and available event details. Avoid opening suspicious executable files in a browser.
2. Preserve relevant evidence and ask support what cleanup or quarantine has already occurred.
3. Review the application’s versions, extensions, administrator accounts and recent changes.
4. Restore affected files only from a trusted source and fix the entry point through supported updates or code repair.
5. Rotate credentials suspected of exposure through a secure process and review unexpected access.
6. Re-scan and monitor the site after recovery.

Do not restore the same weakness

Replacing one flagged file without patching a vulnerable plugin can lead to reinfection. Restoring an unverified old backup can bring malware back. Do not whitelist a detection simply because the file name looks familiar.

Keep independent backups and least-privilege access. Remove obsolete applications and public backup archives. For support, provide redacted paths and incident timing; do not send private keys or complete client databases. Ask the provider to investigate account-wide impact when several sites show similar changes.