Detecting and Removing Malware from a certain cPanel account on Almalinux WHM based VPS

freshclam

clamscan -r /home/[username]/public_html

maldet -a /home/[username]/public_html

grep -r "base64_decode" /home/[username]/public_html

grep -r "eval(" /home/[username]/public_html

grep -r "backup.php" /home/[username]/public_html

crontab -u [username] -l