Cannot turn off firewall and scan scans too much files

Today the firewall is showing disabled, so I guess the first issue is fixed somehow…

Hi!
May I ask about these two other options if they are activated or not?:
– Scan for signatures of known malicious files
– Scan file contents for backdoors, trojans and suspicious code

Because these options will scan all your files too, or you mean although you disabled “Scan plugin files against repository versions for changes” option, the scan tells you about plugins files changes?

Please let me know more details about this issue.
Thanks.

Hi.
They were turned off. The scan for heartbleed was also on the first time I tested this, but it was already finished in the status log. So the scan core files stage was the one that was scaning everything.

Hi,
Well, the scanner starts up by listing all the files on your website before scanning, then it classifies what type they are and checks whether they will be scanned or not depending on the options you already set, so listing all these files is normal at the beginning of the scan process.

However, I can see you mentioned “it takes forever” to scan? so the scan doesn’t finish? I would suggest activating “Enable debugging mode” option under (Wordfence > Diagnostics => Debugging Options) then initiate a new scan and notice any error message that may appear in “Activity Log“.

Let me know how it goes,
Thanks.

Thanks, debuging mode helps me see some things.

First thing is, I am constantly getting these for no reason:

[Jun 24 17:45:02:1466783102.957429:4:info] Scheduled time for day 6 hour 1 is: Saturday 25th of June 2016 01:40:51 AM
[Jun 24 17:45:02:1466783102.956003:4:info] Scheduled time for day 5 hour 1 is: Friday 1st of July 2016 01:58:00 AM
[Jun 24 17:45:02:1466783102.955159:4:info] Scheduled time for day 4 hour 1 is: Thursday 30th of June 2016 01:01:08 AM
[Jun 24 17:45:02:1466783102.953762:4:info] Scheduled time for day 3 hour 1 is: Wednesday 29th of June 2016 01:45:25 AM

And they go on and on. I have even turned off regular scans.

The second thing is, I got the idea to exclude from the scan the biggest directory and then I saw these without wating too long:

[Jun 24 18:02:33:1466784153.252340:1:error] <br /> <b>Fatal error</b>: Maximum execution time of 30 seconds exceeded in <b>/**************/wp-content/plugins/wordfence/lib/wordfenceHash.php</b> on line <b>181</b><br />
[Jun 24 18:02:15:1466784135.935538:4:info] Scan process ended after forking.

Then I excluded a few large files and even all rar and zip with *.zip and *.rar but it still got stuck. It would be helpfull if it says which file is the problem.

Hi,
Regarding the “Fatal Error” you got, please set “Maximum execution time for each scan stage” option under (Wordfence > Options => Other Options) to 20 and re-check this issue, this will keep (pausing/resuming) the scan process on 20 seconds intervals, please check this link for more details.

For the “Scan Scheduling” messages in the activity log, please provide me with a screenshot showing (Wordfence > Scan Schedule) settings on your website.

P.S. It’s recommended to turn off the “debugging mode” in Wordfence diagnostics options once you finish debugging, to save your server resources (database resources in particular).

Thanks.

Still get the same error. Setting it to 20, 28 or 15 does not work.

Scan Scheduling is not even a feature I can use, since it is a free version. Here is the screenshot: https://postimg.org/image/run8z8xbl/

Hi,
Regarding the “Scan Scheduling” messages in the “Activity Log” I checked this issue for you and discussed with the developers team, and it turned out that it’s normal to get these messages in different situations so no need to worry about that.

For the other issue, please try the following:
– Make sure you set the “Maximum execution time for each scan stage” option under (Wordfence > Options => Other Options) to 20 and save the options page.
– Then go to the (Wordfence > Diagnostics) and check the box to “Disable config caching” and “Enable debugging mode” then save the diagnostics page.
– Start a new scan.
– Copy the last few lines of the activity log and paste them here.

Thanks.

Did it and still get the same: https://postimg.org/image/y7amaipf5/
The last hashing line said something about the wp-content folder, could it be that there is located a problematic file that causes this?

Hi,
Please make sure you have the latest version of WordPress and Wordfence plugin, and ask your hosting provider to increase max_execution_time value defined in the php.ini file to something like 60 for example.

Then re-scan again with “Enable debugging mode” turned on, with different values at “Maximum execution time for each scan stage” option under (Wordfence > Options => Other Options) like (20,15,10).

The goal is to find a value that is long enough to allow Wordfence to do some work, but short enough so that it does not exceed the maximum allowed time that a web server process is allowed to execute.

Keep me updated,
Thanks.

Thank you for all your help. I was finally able to finish a scan.
I set php max execution time to 60 and the wordfence setting to 30 and then it worked. Before that I tried php 60 and wordfence 20 and it still failed.
But I must say, this was not a great user experience ;). If you guys can come up with a way to improve this issue with the scan, it would be great.
Thanks.