diff --git a/modules/security/malware-scanner.sh b/modules/security/malware-scanner.sh
index d00c1b7..26c393e 100755
--- a/modules/security/malware-scanner.sh
+++ b/modules/security/malware-scanner.sh
@@ -52,15 +52,19 @@ show_scanner_installation_guide() {
 
     # Check ImunifyAV
     if ! command -v imunify-antivirus &>/dev/null; then
-        echo -e "${CYAN}ImunifyAV${NC} - Commercial real-time protection"
+        echo -e "${CYAN}ImunifyAV${NC} - FREE real-time malware scanner"
         echo "  Status: Not installed"
-        echo "  Installation:"
+        echo "  Installation (cPanel):"
+        echo "    yum install imunify-antivirus imunify-antivirus-cpanel"
+        echo "    /opt/alt/python35/share/imunify360/scripts/av-userside-plugin.sh"
+        echo "  Installation (script method):"
         echo "    wget https://repo.imunify360.cloudlinux.com/defence360/imav-deploy.sh"
         echo "    bash imav-deploy.sh"
-        echo "  Docs: https://docs.imunify360.com/"
+        echo "  Note: ImunifyAV is FREE. Imunify360 is the paid version."
+        echo "  Docs: https://docs.imunify360.com/imunifyav/"
         echo ""
     else
-        echo -e "${GREEN}✓ ImunifyAV${NC} - Installed"
+        echo -e "${GREEN}✓ ImunifyAV${NC} - Installed (FREE version)"
         echo ""
     fi
 
@@ -110,9 +114,9 @@ install_all_scanners() {
     echo "This will install:"
     echo "  • ClamAV (free, open source)"
     echo "  • Maldet (free, Linux-specific)"
-    echo "  • ImunifyAV (commercial, requires license)"
+    echo "  • ImunifyAV (FREE version)"
     echo ""
-    echo -e "${YELLOW}Note: ImunifyAV requires a paid license to function.${NC}"
+    echo -e "${YELLOW}Note: ImunifyAV is FREE. Imunify360 is the paid version.${NC}"
     echo ""
 
     read -p "Proceed with installation? (yes/no): " confirm
@@ -188,22 +192,31 @@ install_all_scanners() {
 
     echo ""
 
-    # Install ImunifyAV
+    # Install ImunifyAV (FREE version)
     if ! command -v imunify-antivirus &>/dev/null; then
-        echo -e "${CYAN}[3/3] Installing ImunifyAV...${NC}"
-        echo -e "${YELLOW}Note: Requires license key to activate${NC}"
+        echo -e "${CYAN}[3/3] Installing ImunifyAV (FREE)...${NC}"
 
-        cd /tmp
-        wget -q https://repo.imunify360.cloudlinux.com/defence360/imav-deploy.sh
+        # Try cPanel method first
+        if command -v yum &>/dev/null && [ -f "/usr/local/cpanel/cpanel" ]; then
+            yum install -y imunify-antivirus imunify-antivirus-cpanel &>/dev/null
 
-        if [ -f imav-deploy.sh ]; then
-            bash imav-deploy.sh &>/dev/null
-            rm -f imav-deploy.sh
+            # Enable cPanel UI plugin
+            if [ -f "/opt/alt/python35/share/imunify360/scripts/av-userside-plugin.sh" ]; then
+                /opt/alt/python35/share/imunify360/scripts/av-userside-plugin.sh &>/dev/null
+            fi
+        else
+            # Fallback to script method
+            cd /tmp
+            wget -q https://repo.imunify360.cloudlinux.com/defence360/imav-deploy.sh
+            if [ -f imav-deploy.sh ]; then
+                bash imav-deploy.sh &>/dev/null
+                rm -f imav-deploy.sh
+            fi
         fi
 
         if command -v imunify-antivirus &>/dev/null; then
-            echo -e "${GREEN}✓ ImunifyAV installed${NC}"
-            echo -e "${YELLOW}  Register with: imunify-antivirus register <key>${NC}"
+            echo -e "${GREEN}✓ ImunifyAV (FREE) installed${NC}"
+            echo "  No license key required - this is the FREE version"
         else
             echo -e "${RED}✗ ImunifyAV installation failed${NC}"
         fi