Clear wp_wfHoover table?

Usually the scans only run once per day, and they help keep your site safe, so you might not want to disable them entirely. You could disable the following options, if you have them enabled:
* Scan files outside your WordPress installation
* Scan image files as if they were executable
* Enable HIGH SENSITIVITY scanning

Can you see how long the scan takes, by looking at the beginning and ending times in the first yellow box?

You could disable the “Enable Live Traffic View” option on the Wordfence Options page, which will lower the load for each pageview.

The table wp_wfHoover should be cleaned automatically after each scan — this may actually mean your scans are not finishing, or your database is not set up correctly. Can you check your database privileges (or ask your host to check them), to make sure that your database user has “all privileges” for all of your tables?

-Matt R

Hi again, Matt

Like you asked, I checked how long the scan takes to complete and it turns

out, it doesn’t seem to

[Oct 05 18:15:14]Preparing a new scan.Done.
[Oct 05 18:15:14]Remote scan of public facing site only available to paid membersPaid Members Only
[Oct 05 18:15:16]Check if your site is being Spamvertized is for paid members onlyPaid Members Only
[Oct 05 18:15:18]Checking if your IP is generating spam is for paid members onlyPaid Members Only
[Oct 05 18:15:20]Scanning your site for the HeartBleed vulnerabilitySecure.
[Oct 05 18:15:36]Fetching core, theme and plugin file signatures from WordfenceSuccess.
[Oct 05 18:15:37]Fetching list of known malware files from WordfenceSuccess.
[Oct 05 18:15:38]Comparing core WordPress files against originals in repository
[Oct 05 18:15:38]Comparing open source themes against www.remarpro.com originals
[Oct 05 18:15:38]Comparing plugins against www.remarpro.com originals
[Oct 05 18:15:38]Scanning for known malware files

it keeps spinning after the checking for malware files and does
not seem to finish?
So there might be a problem right there?

Also, I would like to keep the live visits, as this is the one that helps me identify suspicious visitors and crawlers.

Thanks,

Angie

Ok, that could definitely cause the large table. Did you try disabling Wordfence with the “Delete Wordfence tables and data on deactivation” option enabled, to reset all of the settings and clear the tables? (From your other post.)

Also, have you already disabled the 3 options I mentioned above?

If that was already done, these steps usually fix issues with scans getting stuck at that point:
My scans don’t finish

If that does not help, you can turn on the option “Enable debugging mode” and run another scan — this generates a lot more information, so it may be a little slower, but it will help show where the scan stopped. Once it stops, you can click the “Email activity log” link above the yellow “Scan Detailed Activity” box, and enter my email address to send it to me:
mattr (at) wordfence.com

-Matt R

Hi Matt,

Yes, thanks, I did disable the plugin this afternoon.
Partly because I had newsletters going out and had load problems yesterday.

I selected the option you suggested:

“

Delete Wordfence tables and data on deactivation” option enabled,

and the other 3 options you mentioned were not even activated. (disabled by default?)

Then I enabled the wordfence again and ran a new scan.

The scan is still running at this time (45 min. so far)

I will post how long it takes to complete after done.

I am thinking of upgrading to wordfence premium plugin at this point.

Another question, I currently have Wp-Super Cache installed, as suggested by Hostgator.

Should I switch to Falcon and would this help to load my site faster and reduce load?

Do you have a link on how to switch from Wp-supercache to Falcon please (how to steps, or a link)

Thanks very much for your help ??
Angie

Sorry for the delay — any luck with the scans yet?

45 minutes would be rather long for most sites, so it sounds like something is stopping the scan from running. So if you are still having trouble, the next step would be to turn on “Enable debugging mode”, and email the log to me after a scan seems to have stopped. My email is: mattr [at] wordfence.com

There is no guide for switching between cache plugins, but generally, you can disable and enable either one — performance of either plugin may depend on the way your site is built. (Just make sure not to enable both at once!) Falcon does not need much configuration, and should work well by simply enabling it, but our documentation is here, if you are interested:
Falcon Cache

-Matt R

Hi Matt,

Thanks for asking about the scans.

I did give it a couple of days and it is scanning now and completing.

It does take a little over an hour

[Oct 10 16:45:10]Preparing a new scan.Done.
[Oct 10 16:45:10]Remote scan of public facing site only available to paid membersPaid Members Only
[Oct 10 16:45:12]Check if your site is being Spamvertized is for paid members onlyPaid Members Only
[Oct 10 16:45:14]Checking if your IP is generating spam is for paid members onlyPaid Members Only
[Oct 10 16:45:16]Scanning your site for the HeartBleed vulnerabilitySecure.
[Oct 10 16:45:17]Fetching core, theme and plugin file signatures from WordfenceSuccess.
[Oct 10 16:45:18]Fetching list of known malware files from WordfenceSuccess.
[Oct 10 16:45:19]Comparing core WordPress files against originals in repositorySecure.
[Oct 10 16:45:19]Comparing open source themes against www.remarpro.com originalsSecure.
[Oct 10 16:45:19]Comparing plugins against www.remarpro.com originalsProblems found.
[Oct 10 16:45:19]Scanning for known malware filesSecure.
[Oct 10 17:30:31]Scanning file contents for infections and vulnerabilitiesSecure.
[Oct 10 17:30:31]Scanning files for URLs in Google’s Safe Browsing ListSecure.
[Oct 10 17:41:53]Scanning database for infections and vulnerabilitiesSecure.
[Oct 10 17:50:31]Scanning posts for URL’s in Google’s Safe Browsing ListSecure.
[Oct 10 17:50:46]Scanning comments for URL’s in Google’s Safe Browsing ListSecure.
[Oct 10 17:50:58]Scanning for weak passwordsSecure.
[Oct 10 17:51:18]Scanning DNS for unauthorized changesSecure.
[Oct 10 17:51:18]Scanning to check available disk spaceSecure.
[Oct 10 17:51:18]Scanning for old themes, plugins and core filesProblems found.
[Oct 10 17:51:21]Scan complete. You have 3 new issues to fix. See below.Scan Complete.

There is still one plugin to update I have not located it yet, as it only says:

The Plugin “” needs an upgrade.
Plugin Name:
Current Plugin Version:
New Plugin Version: 4.7.4
Severity: Critical
Status New

However, when I click on the link, the dashboard says all plugins are up-to-date and as you can see the plugin name is missing.

Today I got a message from Envato that visual editor needs updating (security risk), so maybe it`s that.

So the scans are now working and maybe its because I am disabling – enabling wordfence to clear tables.

The only thing is that every time I am enabling again, I have to set all the options back.

It does not save my selections when the plugin gets deactivated.

Any way around that, please?

Other than that happy so far, wordfence is the first thing I check when I log into wp.

Thanks,

Angie

Ok, it’s good that the scan has completed successfully. In the latest version of Wordfence, released last week, there was an improvement in clearing tables, so you can probably stop clearing the tables by resetting the whole plugin. If you do have problems with scans again, let us know.

The plugin with the blank name is probably a plugin that is bundled with a premium theme, so you’re probably right that it’s related to the notice from Envato — bundled plugins aren’t installed in the normal place, and there isn’t a standard as to where the premium themes place them, so Wordfence can’t get the plugin details like usual.

Make sure to update the visual editor plugin (or the theme it came with) as soon as possible — it’s a popular plugin and if it’s now publicly known to have a flaw, it could quickly be exploited on many sites.

-Matt R