How to Safely Scan and Clean a Compromised Website Backup? - Forum | JoomShaper
Solved General

How to Safely Scan and Clean a Compromised Website Backup?

Asked by rachoud 6 months ago Last activity 6 months ago

Hi all, I've got a website backup that I need to scan for malware and clean up. Any recommendations on the best tools or steps to do this?
I hope my question is not off-topic for this forum. Thank you all.

Accepted answer

Marked as the solution
Mehtaz Afsana Borsha Staff
6 months ago

Hi,

Thanks for your question.

The safest way to handle a compromised backup is to avoid restoring it directly on your live site. Instead, work in a local or staging environment first.

You can then:

  • Scan files using tools like ClamAV or your hosting security scanner
  • Check for suspicious code (e.g. eval(base64_decode(...))) and unknown .php files
  • Review the database for spam links or unknown admin users
  • Replace Joomla core files with a fresh copy
  • Remove and reinstall extensions from trusted sources only

Before going live:

  • Update everything
  • Change all passwords
  • Run a final scan

⚠️ Most importantly, make sure you fix the root cause (vulnerable extension, weak password, etc.), otherwise the site may get infected again.

Regards,

2 more replies

Oldest first Newest first Most helpful
Paul Frankowski Senior Staff
6 months ago

HI,
it's off-topic, but .... I have give small tip for free.

  1. In many trusted Hosting services you have Malware / Virus scanner included, it can be useful to scan files, but they must be unziped in separate folder, then you can click Scan from cPanel or ask Hosting Support to scan it.

  2. You can also use Windows/Mac AntyMalware software to scan file on your local laptop.

  3. You can on subdomain, install WordPress + Firewall plugin + then in folder "files" put unziped Joomla site, and run scanner from WP. It will scan all folders & files, and that one. Malware for WP and Joomla have the same pattern. That's why it works.

  4. More solutions & tricks are $

rachoud Asked this
6 months ago

Thank you, Paul Frankowski and Mehtaz Afsana Borsha, for your answers and explanations. I apologize for my question being off-topic.

Mehtaz Afsana Borsha Staff
6 months ago

You are always welcome and thanks for accepting the answer.

Log in to reply.