Sign in Sign Up

This site uses cookies and other tracking technologies to make possible your usage of the website, assist with navigation and your ability to provide feedback, analyse your use of our products and services, assist with our promotional and marketing efforts, and provide better user experience.

By using the website, you agree to our Privacy policy

Report a bug

4315 1
How-to 7 min read October 17, 2019

How to check a website for viruses

Computers can work with viruses and perform tasks. This approach, however, will not work on a web resource as websites with viruses are blacklisted by Google which warns users about the threat. In this article, we'll tell you how to avoid such a situation.

What can be a virus check?

Website checks for viruses can be divided into two major types:

  • Content check. This is the most superficial way, but in this way, it is easiest for attackers to infect a page. Imagine that you created comment fields, and the hacker places a virus file in them. And now, despite the correct approach to a user, you get a virus.

  • Code check. Thus, everything that a website consists of is checked. This can be a long process, but you should not ignore it especially when your website is used for commercial purposes and accepts payments.

First, you need to know how search engines themselves can help you detect and timely eliminate viruses. For example, Google regularly checks websites for malicious code.

You can find the research results by following the link:

If everything is fine with your website, the result will look like this:
Google Transparency Report: no unsafe content found
However, it is unreasonable to wait until Google finds a virus on your website. To ensure that your website is always safe, you must:

  • install regular CMS antivirus scanning. The choice is at your discretion and wallet. Some of the popular solutions are Norton and Dr.Web;

  • scan your website for viruses using web services. We will talk about them in a little while;

  • scan files on the hosting to detect malicious scripts.

What to do if the website is infected with a virus?

Let's suppose you have already configured the antivirus system so that it checks the content management system as well as all connected plugins. This is an important step, but it will only protect from the most amateurish attacks. There are frequent cases when a virus enters the website's file system from your own computer: the antivirus could not cope and allowed the malware to infect the hosted CMS.

Is the website already infected and pessimized in the search results? Carry out a sequential check of your web pages for malicious code. First, you need to scan the website for viruses using free online tools.

They will help determine if your website has content that is used by hackers. Normally, these are various redirects to sales websites, scripts for stealing cookies, and so on. If the hoster began to scold your website and visitors complain about advertising, you can use one of several options.


PCRisk website malware scanner
This website malware scanner is a free online tool that can be used to scan any website for malicious code, hidden iframes, vulnerability exploits, infected files, and other suspicious activities. This automatic tool scans 100 megabytes of the URL response content and can effectively identify evolving web threats.

You do not have to register to have your website scanned for malicious content. If you want your website to be reviewed manually, you can choose one of the tariffs and pay for manual scanning.


How to check a site for malware in VirusTotal
This is an industry rock star thanks to the speed of work. You don't need to register or go through any other circles of hell. Just insert a link, upload a file, or just find a page through a search engine. Thanks to the large database, there is no need to wait for the verification of websites that have already been verified. The service will simply give the result of an online scan of the website for viruses, showing an estimate of over 65 antivirus systems.


Online virus checking Sucuri
The good thing about this service is that it uses its own heuristic-based verification algorithm. To use it, you need to register and select a tariff plan. Despite the fact that prices may seem high, the service offers full support and even removal of malicious code by specialists. By the way, if your website has already "crashed" due to malware, the service employees are ready to fix it for $500.

Checking website files

In addition to web services, there is also the option of checking all the files that make up the website. To do this, download all the files using FileZilla or similar software and check the files using the antivirus software on your computer. Once the malicious code is found, replace the file with a healthy one and upload it back to the hosting.

Using the popular AI-Bolit script also yields results. It must be placed in the root folder of the website, and then you need to run it using a browser. It finds malware and sends a report to e-mail or saves data to a file.
Antivirus and malware scanner for websites AI-Bolit


The abovementioned methods are more likely to be preventative in their essence and can cure the website of simple viruses. If a resource is under a targeted attack, only a team of professionals will be able to repel it using the appropriate software.

Anyway, it is better not to neglect the protection of your website. If you use the abovementioned services and scripts, you can find and destroy ordinary malware as quickly as possible so as not to lose the trust of users and search engines, and therefore the website positions in the search results.

This article is a part of Serpstat's Checklist tool
Checklist at Serpstat
Checklist is a ready-to-do list that helps to keep reporting of the work progress on a specific project. The tool contains templates with an extensive list of project development parameters where you can also add your own items and plans.
Try Checklist now

Learn how to get the most out of Serpstat

Want to get a personal demo, trial period or bunch of successful use cases?

Send a request and our expert will contact you ;)

Rate the article on a five-point scale

The article has already been rated by 1 people on average 1 out of 5
Found an error? Select it and press Ctrl + Enter to tell us

Share this article with your friends

Sign In Free Sign Up

You’ve reached your query limit.

Or email
Forgot password?
Or email
Back To Login

Don’t worry! Just fill in your email and we’ll send over your password.

Are you sure?


To complete your registration you need to enter your phone number


We sent confirmation code to your phone number

Your phone Resend code Queries left

Something went wrong.

Contact our support team
Or confirm the registration using the Telegram bot Follow this link
Please pick the project to work on

Personal demonstration

Serpstat is all about saving time, and we want to save yours! One of our specialists will contact you and discuss options going forward.

These may include a personal demonstration, a trial period, comprehensive training articles & webinar recordings, and custom advice from a Serpstat specialist. It is our goal to make you feel comfortable while using Serpstat.




We are glad of your comment
Upgrade your plan

Upgrade your plan

Export is not available for your account. Please upgrade to Lite or higher to get access to the tool. Learn more

Sign Up Free

Спасибо, мы с вами свяжемся в ближайшее время

View Editing


You have run out of limits

You have reached the limit for the number of created projects. You cannot create new projects unless you increase the limits or delete existing projects.

I want more limits