Scan Malware checks Joomla files for suspicious PHP code

This job arises because a Joomla site can be compromised through an extension, an outdated component, stolen credentials or a vulnerable server. Malicious code may be hidden inside otherwise ordinary PHP files, and Joomla’s normal administration screens do not provide a general malware scan.

Core Joomla can update the CMS and extensions, manage installed packages and users, and provide some maintenance and security controls. It does not, however, inspect the site’s PHP files for signs of injected code. A template override is useful for changing output or behaviour without editing core files; it is not a malware-detection method. Site owners usually turn to a security extension, a hosting scanner or a manual comparison with known-good files. According to the listing, Scan Malware goes beyond Joomla core by analysing files for suspicious PHP patterns and Joomla-related threats. The listing says it can detect, analyse and handle such files, but does not explain the handling in enough detail to judge whether that means quarantine, deletion or reporting.

It is aimed at administrators, agencies and hosting teams responsible for Joomla sites where file integrity needs a dedicated check, particularly after a suspected compromise. A small, low-risk site with a managed host’s existing malware monitoring, or a site that only needs routine Joomla updates, may have no reason to add it.

• Scan Malware is a paid download, licensed under GPLv2 or later.
• The directory lists compatibility with Joomla 4, 5 and 6.
• The listing shows no reviews, so it provides little evidence of JoomSAFE’s track record there.
• Before buying, check scan scope, false-positive handling, remediation and restore options, resource use, scheduled scans, reporting, support terms and pricing. The listing does not provide those details, nor does it state how detection is performed.

Listed on the Joomla Extensions Directory.