The Malware Scanner section of SecurityCheck Pro provides two complementary tools for detecting and investigating malicious code in your Joomla file system.
The main scanner, accessed via Options > Malware Scanner, analyses your Joomla files using a library of known malware patterns. It can detect obfuscated PHP, injected JavaScript, web shells, and other common malware signatures without requiring an internet connection for the initial scan phase.
See Scanner Options for a full description of the scanner interface, scan metrics, results table, quarantine management, and OPSWAT online verification.
The Manage Logs sub-section displays the history of files submitted to the OPSWAT Metadefender Cloud service for online verification. Each submission log entry records the number of files scanned, threats found, and a list of infected files.
See Online Check Logs for details.
The local scanner runs entirely on your server and does not require an API key. It flags files that match known malware patterns at three alert levels (High, Medium, Low).
For files flagged as suspicious, you can optionally submit them to the OPSWAT Metadefender Cloud service, which checks each file against over 40 commercial anti-malware engines. This secondary check helps distinguish confirmed malware from false positives.
A High alert file requires manual review regardless of the OPSWAT result. Obfuscated or encrypted malware is frequently not detected by automated scanning engines.