diff --git a/modules/security/malware-scanner.sh b/modules/security/malware-scanner.sh
index 2f08f52..7f12b5f 100755
--- a/modules/security/malware-scanner.sh
+++ b/modules/security/malware-scanner.sh
@@ -235,9 +235,20 @@ install_all_scanners() {
                 return 1
             fi
 
-            # Change to extracted directory
-            if ! cd maldetect-* 2>/dev/null; then
+            # Find the extracted directory
+            local maldet_dir=$(find /tmp -maxdepth 1 -type d -name "maldetect-*" 2>/dev/null | head -1)
+            if [ -z "$maldet_dir" ]; then
                 echo -e "${RED}✗ Cannot find extracted directory${NC}"
+                echo "  Available directories in /tmp:"
+                ls -la /tmp | grep maldetect | sed 's/^/    /'
+                cd /tmp
+                rm -rf "maldetect-"*
+                return 1
+            fi
+
+            # Change to extracted directory
+            if ! cd "$maldet_dir"; then
+                echo -e "${RED}✗ Cannot access directory: $maldet_dir${NC}"
                 cd /tmp
                 rm -rf "maldetect-"*
                 return 1