Blog

Login to cPanel server via SSH as the root user.

Execute the below commands:

Output install.sh script

Remove unused gzipped tar file

You can run a Linux Malware Detect scan now, it would run with no problem. However, it would not include ClamAV’s definitions, if you not before installed ClamAV scanner. Maldet without installed ClamAV slowing down the scan completion time. Also threat detection ratio is low without malware expert signatures.

Updating the application

Manually update maldet

Configuring Linux Malware Detect (Maldet)

By default all options are fully commented in the configuration file, so configure it according to your needs. But before making any changes let’s have a detailed review of each option below.

Open file /usr/local/maldetect/conf.maldet and make changes according to your needs

1. email_alert : If you would like to receive email alerts, then it should be set to 1.
2. email_addr : Add your email address to receive malware alerts.
3. quarantine_hits : The default quarantine action for malware hits, it should be set 0.
4. quarantine_clean : Cleaning detected malware injections, it should be set 0.
5. quarantine_suspend_user : The default suspend action for users wih hits, set it as per your requirements.
6. quarantine_suspend_user_minuid : Minimum userid that can be suspended.

Running full malware scan user home directories

First i suggest full scan user home directories to detect and clean malware:

The Bellow command will scan all files and directories within the /home directory, which is where the content for cPanel accounts is stored.

Later you can only scan example all .php files. Command Below:

Below is a sample output of what you should see: