• Resolved arham2023

    (@arham2023)


    Website has been compromised. It’s currently redirecting to an gambling site. I attempted to run a Wordfence scan, but it fails.

    Scan Stage Failed

    A scan stage has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. Wordfence will make up to 2 attempts to resume each failed scan stage. This scan may recover if one of these attempts is successful. 

    I urgently need assistance to run a full scan and secure the website.

    Please guide me on how to resolve this issue and remove the malware.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter arham2023

    (@arham2023)

    BUMP

    Plugin Support wfmargaret

    (@wfmargaret)

    Hi @arham2023,

    Thank you for reaching out. To help with the scan, please do the following for me:

    • Stop any running scan by pressing the STOP SCAN button.
    • Click on Scan Options and Scheduling.
    • In Performance Options, set Maximum execution time for each scan stage to 20.
    • In Advanced Scan Options, enable the option Use only IPv4 to start scans.
    • Hit the SAVE CHANGES button.
    • Go to Wordfence > Tools > Diagnostics and expand the Debugging Options section.
    • Enable the option Enable debugging mode.
    • Disable the option Start all scans remotely if it is enabled.
    • Hit the SAVE CHANGES button.
    • Start a new scan.
    • Copy the last 20 lines or so of the activity log (click the “Show Log” link) once the scan finishes and paste them in this post.

    Remember to disable Enable debugging mode after you have finished.

    Can you also send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Regarding the infection, please follow the checklist here: https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

    Make sure to get all your plugins and themes updated and update WordPress core too. If you are on an older branch (WordPress 4.x etc) because you wanted to wait before installing the latest version because of Gutenberg or a custom theme compatibility you still need the latest update in that version. Those can be found here: https://ww.wp.xz.cn/download/releases/

    WordPress sometimes patches their older releases if they find a vulnerability so make sure to update your version if needed. We, of course, recommend that you update to the latest version.

    As a rule, any time I think someone’s site has been compromised I also tell them to update their passwords for their hosting control panel, FTP,  WordPress admin users, and database. Make sure to do this.

    Additionally you might find the WordPress Malware Removal section in our free Learning Center helpful.  

    If you are unable to clean this on your own there are paid services that will do it for you.  Wordfence offers one and there are others.  Regardless if you choose to clean it yourself or let someone else do so, we recommend that you make a full backup of the site beforehand. 

    Thanks,
    Margaret

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Scan Stage Failed’ is closed to new replies.