Scan not working

Hi @luisbezanilla,

This could be caused by a corrupted wfConfig table in your database. Could you check the integrity off all Wordfence tables (in particular, the wfConfig table) and if necessary, repair them.

Thank you very much for your help

All the Wordfence tables are now OK. The scan starts working but reaches “Scanning posts for URLs on a domain blacklist” and does not progress any further. I have tried to put the max execution time empty, 15, 20 or 30s without solving the problem.

Also the “Checking for the most secure way to get IPs” failed

Hi @luisbezanilla,

Please try and apply the suggestions outlined here.

Regarding the max execution time, we recommend decreasing it rather than increasing it. –try with a value of “8”.

Also, in case it is enabled, can you try disabling the scan option “Scan images, binary, and other files as if they were executable” which is located on the “Wordfence –> Options” page?

This scan option is mainly intended for using on known infected sites. It requires a lot of resources and is not necessary to use for normal scans. The reason for this is that non-executables such as images can not execute themselves. If there is malware in an image, there will be malware in other files on your server as well and those will be detected even with this scan option off.

Hi @wfyann
I changed to 8 but it does not work. The “Scan images, binary …” was disabled. I read all the instructions on the link you sent me, but I did not find anything that could help.

In fact, wordfence was running for years without problems and they started a few days ago without having made configuration changes or others.

Now, the highlighted images are not displayed. I do not know if these problems are related or if I have to open a new support query. In that case, please tell me how to do it: I have not managed to discover how to start a new support.

Hi @luisbezanilla,

Could you please temporarily disable the following scan options and then run a new scan:

• Scan posts for known dangerous URLs and suspicious content
• Scan comments for known dangerous URLs and suspicious content

Also could you enable the debugging mode feature (on the Wordfence –> Tools –> Diagnostics page) and run a scan (with the “Maximum execution time for each scan stage” set to 8) then email the activity log to yann[at]wordfence[dot]com.

Lastly, could you please:

• Go to the Wordfence –> Tools –> Diagnostics page
• Send the report to the aforementioned email address

Hi @luisbezanilla,

Thanks for sending the report.

I see the error regarding the “Basic config writing” is still there; so you will need to check the wfConfig table in your database.

It appears you’re not using a default theme; could you please temporarily switch to a default theme and check if the issue related to the “highlighted images” still occurs?

Also, can you confirm you’ve tried to run the scan after disabling the options listed in my previous post?

Lastly, could you please follow the steps to run a scan in debugging mode and email the activity log?

I have changed the web server. The “Basic config writing” is fine now as well as the problem of the highlighted images. However, the scan does not complete. To which address should I send the activity log?

Hi @luisbezanilla,

Do you confirm you’ve tried to run the scan with “Maximum execution time for each scan stage” set to 8 after disabling the options “Scan posts for known dangerous URLs and suspicious content” and “Scan comments for known dangerous URLs and suspicious content”?

Please email the activity log (from a scan run in debugging mode) to the same address you sent the report to.

Hi @wfyann

It seems that in the server change the settings were changed. Now I have put “Maximum execution time for each scan stage” set to 8 after disabling the options “Scan posts for known dangerous URLs and suspicious content” and “Scan comments for known dangerous URLs and suspicious content”

I will stop the current scan and start a new one.

The scan is in debbugin mode.

The email in which I received your email address had been deleted. Could you send it back to me?

Thank you very much. The scan is working perfectly. I have activated again “Scan posts for dangerous dangerous URLs and suspicious content” and “Scan comments for dangerous dangerous URLs and suspicious content” and deactivated the debbugin mode.

I received a Wordfence notice that my server uses Lite Speed. I have made the changes to the .htaccess (https://docs.wordfence.com/en/LiteSpeed_aborts_Wordfence_scans_and_updates._How_do_I_prevent_that%3F)

Hi @luisbezanilla,

Thanks for letting us know!

I’m glad you managed to get the scan to successfully complete.