The Malware Scanner tab configures the local file scanner and the OPSWAT Metadefender Cloud integration.
| Option | Default | Description |
|---|---|---|
| File Extensions | php, php3, php4, php5, phps, html, htaccess, js | Comma-separated list of file extensions to include in the scan. Files with extensions not in this list are skipped. |
| Use File Manager Exceptions | No | When enabled, paths added as exceptions in the File Manager are also excluded from malware scans. |
| Deep Scan | No | When enabled, the scanner also checks for suspicious keywords that may appear in legitimate code. Increases detection coverage but also increases false positive rates. |
| Path Exceptions | (empty) | Paths to exclude from malware scanning, one per line. The /tmp, /logs, and /cache directories are always excluded by default. |
| OPSWAT API Key | (empty) | Your free OPSWAT Metadefender Cloud API key. Required to use the online hash and file verification features. Obtain a free key at metadefender.com. |
| Submission Type | Hashes | How suspicious files are submitted to OPSWAT: Hashes sends only the cryptographic fingerprint (faster, uses fewer API credits, 1,000 per day free); Files uploads the complete file for multi-engine analysis (more thorough, limited to 25 files per day free). |
| Timeline | A week ago | Restricts the scan to files created or modified within the selected period: Yesterday, A week ago, A month ago, or Anytime. |
| Log Files Stored | 5 | The number of scan log files to retain. Older logs are deleted when the limit is reached. |
