Title: Scan not completed
Last modified: August 4, 2020

---

# Scan not completed

 *  Resolved [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/)
 * Scan not completed
 * I have my main website infected because it redirects my page when entering any
   link (it opens a new site, but it lets me go to the destination of the link),
   I installed this plugin but it did not work, at the beginning it reached 99% 
   and it stayed there.
 * In my godaddy hosting, I have hosted 2 additional sites, so I installed this 
   plugin on my other page (small website), but it is still 99%
 * Change the value from -1 to 0 (as I read in another post) but it didn’t work 
   = /
 * Can you please help me?
    -  This topic was modified 6 years ago by [brandostick](https://wordpress.org/support/users/brandostick/).
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fscan-not-completed%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 14 replies - 1 through 14 (of 14 total)

 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210425)
 * Changing the Scan Depth value in the Setting from -1 to 0 will skip the File 
   Scan and only attempt the DB Scan. I this case it sounds like it it the DB Scan
   that is hanging at 99%, so that is not the best solution here. Try un-checking“
   Database Injections” under the “What to look for:” section of the Setting, and
   then see if it is able to finish the Complete Scan. If you need more help figuring
   out why it’s getting stuck then please send me a screenshot of the scan at 99%
   so that I can see what might be causing this. You can email me directly if you
   don’t want to post a screenshot on this public forum:
    eli AT gotmls DOT net
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210441)
 * Thank you very much for your quick response.
 * I am going to send a screenshot to the mail at this time, I am going to follow
   the steps that you indicate, but I am concerned about the scanning time, it took
   me about 6 hours to reach 99% on this site, in the other I took about 30 minutes.
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210516)
 * ok, so 6 hours is way too long. there must be something that is interfering with
   the scan and causing it to take so long, which might also explain why it was 
   unable to get past 99%.
 * If you want to send me a screenshot of the scan progress now (or after at least
   20 minutes of scanning) then it might help me determine if there is something
   obvious that is causing the scan to take so long. I can tell a lot from the initial
   file/folder count, and calculate the time it is taking on each file vs. the total
   estimated scan time to see if it is general slowness on the server of scan trouble
   in specific directories that could be causing it to hang.
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210544)
 * Alright, I’m going to start scanning again and I send a capture after 20 minutes,
   to see if we can find part of the problem.
 * Thank you very much again
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210586)
 * Done, I sent your request to your email.
 * thank you!
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210711)
 * Thanks for the screenshot. In particular, the one that shows how it “Got Stuck”
   at 99%, in this I can see that it’s having repeated trouble reading folder in
   the cache directory. This is actually fairly common as many caching plugin have
   a tendency to interfere in a variety of way with scanning live files in real 
   time.
 * My suggestion would be for you to disable all caching on your site, deactivate
   any caching plugins, and delete all cache files. Then run the Complete Scan again
   and let me know how it goes.
 * Note: you can always re-enable caching on your site after the scan is done, but
   it is always a good idea to delete all your cache files whenever you suspect 
   that your site could have been hacked or infected because the infections can 
   be preserved in your cache even after the root cause has been removed.
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210846)
 * Following the steps that you indicated, I have already completed the website 
   scan =)
 * I see 25 files were skipped and 3 read errors occurred while scanning, However
   no malware found = /
 * The site sometimes redirects me to other pages, sometimes not .. but I can also
   see that it does not allow me to enter the option to edit the theme.
 * Do you think something can be done in that case?
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13210951)
 * Do you know when you stopped being able to edit the theme, and what might have
   been added to the site around that time?
 * Are you sure that the redirects that you experience are caused by the code in
   your site and not something installed in your browser? Does it ever happen on
   other computers?
 * You can disable all the plugins that you don’t absolutely need for your site 
   ti function and then see if the redirect goes away? Also, compare the complete
   list of Plugins installed with the list of Plugin folders that my scanner sees(
   the list will pop up when you click on the word “plugins” under “What to scan:”
   on the Scan Settings page. Is there anything on that list that you cannot match
   up to one of the plugins that you know you have installed?
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13211010)
 * Answering your questions
 * I think the problem was generated when I migrated the site to a higher capacity
   server, but I’m not 100% sure
 * Redirects are caused by my site, loading it on any pc, even cell phone, redirects
   me.
 * In forums, I read that this was solved by my hosting service providers, I told
   the godaddy staff about the problem, they confirmed that it was malware on the
   server, but they charge a lot of money to offer the virus removal service, they
   do not They do it for free, which is why I prefer to pay third parties a much
   more reasonable amount than they charge.
 * I just realized that on the web at localhost I can edit the template and I don’t
   see redirects .. but on the server I can’t edit …
 * I don’t remember installing anything new, however I’m going to undo each plugin
   to see if the error doesn’t show up
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13211415)
 * So you have a local copy of your site that is not affected? That’s great!
 * One thing you could do would be to download a copy of your infected site into
   separate temporary directory on your local machine (don’t run the infected site
   on your local host just save the files). Then use a directory comprison program
   like Meld to look for differences (like maybe an additional plugin or theme file
   that is not on your clean local copy).
 * If you find any differences that might contain this redirect them please send
   those files to me for further examination so that I can add this new threat to
   my definition updates.
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13253825)
 * Greetings Eli
 * Sorry for my absence, I have been mourning the death of a relative due to Covid.
 * I am returning to the topic of my problem, and I have checked the page at [https://sitecheck.sucuri.net/](https://sitecheck.sucuri.net/)
   and I have this malware:
 * **Known javascript malware: rogueads.unwanted_ads? 16**
 * I was checking on that same page the other 2 websites that I have hosted on that
   server, and they all have the same malware ..
 * I have scanned all 3 sites using your software but I can’t find this specific
   malware, do you think there is something I can do about it?
 * Your program ignores several files, I think this problem is due to excessive 
   time while scanning, do you think that there is the problem?
 * You can see the errors here
    [https://sitecheck.sucuri.net/results/https/www.chiksfashion.com](https://sitecheck.sucuri.net/results/https/www.chiksfashion.com)
 * Thank you very much.
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13253862)
 * I also mention that I have followed the steps that start some websites that say
   to eliminate malware, but the line of code in post.php does not appear inside
   the wp-includes folder or the functions.php file
 * i also don’t have these files in wp-includes
    wp-vcd.php wp-tmp.php wp-feed.php
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13254517)
 * I’m sorry for your loss…
 * I think I can help you find the source of your infection if you haven’t cleaned
   it already.
 * First, understand that “rogueads.unwanted_ads” is just a general classification
   assigned by Sucuri to the ad scripts that they found on your pages. These can
   come from all kinds of different places with the PHP code in your site, it was
   not necessarily generated by files named wp-vcd.php, wp-tmp.php, wp-feed.php.
 * What my plugin does is totally different from any external scan of your forward
   facing HTML. My plugin scans all the source code on the back end of your site
   looking for any patterns that might be part of the malicious code that is responsible
   for generating those scripts in your HTML output. I can see that “popunder” script
   in your HTML right under you FB connect scripts in the HEAD. It could be a direct
   injection into your theme’s header.php file but it more likely using a WP hook
   to dynamically insert that script from some other PHP file. Either way we need
   to start by examining the contents of the header.php file in your active theme.
 * If you don’t want to post the code here you can send that file directly to me:
   
   eli AT gotmls DOT net
 *  Thread Starter [brandostick](https://wordpress.org/support/users/brandostick/)
 * (@brandostick)
 * [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13256381)
 * Greetings again Eli, thanks for your answer and guidance,
 * This is the complete code that appears in Header.php of the active theme.
 * <?php
    /** * The header for Astra Theme. * * This is the template that displays
   all of the <head> section and everything up until <div id=”content”> * * [@link](https://wordpress.org/support/users/link/)
   [https://developer.wordpress.org/themes/basics/template-files/#template-partials](https://developer.wordpress.org/themes/basics/template-files/#template-partials)**
   [@package](https://wordpress.org/support/users/package/) Astra * [@since](https://wordpress.org/support/users/since/)
   1.0.0 */
 * if ( ! defined( ‘ABSPATH’ ) ) {
    exit; // Exit if accessed directly. }
 * ?><!DOCTYPE html>
    <?php astra_html_before(); ?> <html <?php language_attributes();?
   >> <head> <?php astra_head_top(); ?> <meta charset=”<?php bloginfo( ‘charset’);?
   >”> <meta name=”viewport” content=”width=device-width, initial-scale=1″> <link
   rel=”profile” href=”[https://gmpg.org/xfn/11″&gt](https://gmpg.org/xfn/11″&gt);
 * <?php wp_head(); ?>
    <?php astra_head_bottom(); ?> </head>
 * <body <?php astra_schema_body(); ?> <?php body_class(); ?>>
 * <?php astra_body_top(); ?>
    <?php wp_body_open(); ?> <div <?php echo astra_attr(‘
   site’, array( ‘id’ => ‘page’, ‘class’ => ‘hfeed site’, ) ); ?> > [<?php echo esc_html( astra_default_strings( ‘string-header-skip-link’, false ) ); ?>](https://wordpress.org/support/topic/scan-not-completed/?output_format=md#content)
 *  <?php astra_header_before(); ?>
 *  <?php astra_header(); ?>
 *  <?php astra_header_after(); ?>
 *  <?php astra_content_before(); ?>
 *  <div id=”content” class=”site-content”>
 *  <div class=”ast-container”>
 *  <?php astra_content_top(); ?>
 * I hope it is the one requested.
 * Regards!

Viewing 14 replies - 1 through 14 (of 14 total)

The topic ‘Scan not completed’ is closed to new replies.

 * ![](https://ps.w.org/gotmls/assets/icon-256x256.png?rev=1001824)
 * [Anti-Malware Security and Brute-Force Firewall](https://wordpress.org/plugins/gotmls/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/gotmls/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/gotmls/)
 * [Active Topics](https://wordpress.org/support/plugin/gotmls/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/gotmls/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/gotmls/reviews/)

 * 14 replies
 * 2 participants
 * Last reply from: [brandostick](https://wordpress.org/support/users/brandostick/)
 * Last activity: [6 years ago](https://wordpress.org/support/topic/scan-not-completed/#post-13256381)
 * Status: resolved