{"id":1212,"date":"2020-07-20T23:39:13","date_gmt":"2020-07-20T23:39:13","guid":{"rendered":"https:\/\/www.rochen.com\/docs\/?post_type=ht_kb&p=1212"},"modified":"2022-05-19T00:21:46","modified_gmt":"2022-05-19T00:21:46","slug":"imunify360-usage","status":"publish","type":"ht_kb","link":"https:\/\/www.rochen.com\/docs\/documentation\/imunify360-usage\/","title":{"rendered":"Using Imunify360 to Fight Malware"},"content":{"rendered":"\n

To protect our clients from inbound attacks, we use the best tools in the industry. One such tool that we have deployed on our shared servers is Imunify360 from CloudLinux<\/a>.<\/p>\n

What is Immunify360?<\/h3>\n

Immunify360 provides a hardened web application firewall as well as automatic malware scanning and clean-up. It’s a great security tool for users of any experience level because it doesn’t require any setup to get started and is easy to use.\u00a0<\/p>\n

If you suspect a security issue with your site, or if you think that it may be getting targeted by hackers, you can check the Imunify360<\/strong> interface in cPanel to review the recent logs and to clean up any malware.<\/p>\n

How does Imunify360 work?<\/h3>\n

From cPanel, navigate to the Security<\/strong> section, and then choose the Imunify360<\/strong> icon to access the plugin:\u00a0<\/p>\n

\"imunify360<\/p>\n

Files tab<\/h4>\n

On the Files<\/strong> tab, there is a list of any recent malware findings and their statuses. Typically the files will have been cleaned or had their contents deleted, as you can see from the screenshot below. If you select a given item, then you can click to view it under the available action column.\u00a0<\/p>\n

\"imunify360<\/p>\n

History tab<\/h4>\n

The next tab is the History<\/strong> tab. It shows the same files as the Files<\/strong> tab, but with historical information about previous actions taken for each file. If a file has had recurring issues, then the History<\/strong> tab will provide further details about them.<\/p>\n

\"\"<\/p>\n

Ignore list tab<\/h4>\n

Go to the Ignore list<\/strong> tab to whitelist a false positive file. Click Add New File<\/strong> or Directory<\/strong>. Then, type in the full path to the file, and click Add<\/strong>.<\/p>\n

\"\"<\/p>\n

Proactive Defense tab<\/h4>\n

The next tab, Proactive Defense<\/strong>, shows blocked incoming PHP-based attacks.<\/p>\n

This tab also two addtional options as well:\u00a0<\/p>\n

    \n
  1. Kill Mode<\/strong> (default and recommended), which terminates scripts as soon as an attack is detected<\/li>\n
  2. Log Only<\/strong> which you can use if you suspect Kill Mode is getting in the way of your legitimate scripts.\u00a0<\/li>\n<\/ol>\n

    \"\"<\/p>\n

    Click the cog in the upper right corner for action options to choose as default settings for handling detected malware:\u00a0<\/p>\n