PrestaShop malware and suspicious-file scanning

Find risky PHP patterns, obfuscation, and known dangerous tooling in your PrestaShop file tree before they become a silent long-term foothold.

Why PrestaShop stores need file scanning

Compromise often leaves artifacts: webshells in upload folders, unexpected PHP beside themes, or altered module files. The storefront can still look fine while those files wait for an attacker callback.

What Security Engine scans for

The malware scanner uses heuristics aimed at suspicious PHP constructs, obfuscation techniques, and tooling commonly associated with malicious droppers. Results include paths and severity so you or your agency can inspect before deleting.

How to use findings

  1. Run a scan from the Security Engine back office.
  2. Open each critical finding and verify whether the file is expected.
  3. Remove or clean confirmed malicious content, rotate credentials if needed, and re-scan.

Heuristics are not omniscient. Treat the scanner as a strong signal, then confirm with human review — especially on heavily customized shops.

Malware feature details Scan documentation