This is really a pain for those who has been infected by malwares in their WP account.
I think you need to have a server that block IP address. We’ve been in the market for quite a long time but we appreciate that we we’re not attack by some of this..
Multisite in WordPress is quite a bit challenge. You’re concern need to be address by some expert but maybe this can help.
Maybe this tutorial might help you WordPress Multisite Settings.
I prefer using a linux server rather than windows.