New to the community? Start here

[Defender Pro] Defender not finding all malicious files and codes

Hello!
Just wondering why Defender Pro is not finding all malicious files and codes that Sucuri or WordFence do, which we used previously. If this is not in fact possible, the WPMU Dev subscription is absolutely worthless to us. We would love to stay…!
Thanks,
Richard

Tue, 3 Dec 2019 7:45:14
More Defender Pro discussions
Defender Pro
  • Predrag Dubajic
    • Support

    Hi Richard,

    Could you provide us with some additional information on what did Defender scan miss?
    File Scan checks for non-default WP files within your root folder as well as plugin and theme code and it uses wpvulndb.com to check for known malicious code.

    If you have specific files, theme, or plugins that are infected but Defender missed it in the scan could you please put them in a zip file, upload it to any file sharing service like GDrive or Dropbox and share the download link here so our devs can have a closer look at it?

    Best regards,
    Predrag

  • Rich
    • WPMU DEV Initiate

    Hi,

    here is the full report from SiteGround using Sucuri Scan:

    https://docs.example.com/document/d/1Hzqwr6dj2xgMX71riPu-w9OtgBMhPW1ENh7cztXW3Go/edit?usp=sharing

    All these sites are in our Hub.

    For example Dr.Dahn (drdahn.ch), the file scan in Defender Pro (which takes extremely long): produced 4 less than in the current report. It could be that they were removed in the meantime, however. Just to be sure, would it be possible to compare one or two the sites?

    It may be that the one site I reported originally was buggy to begin with. At any rate, we will keep a close eye on the scan and might run a parallel scan to be sure, it the results are equal and we can continue to use your service.

  • Rich
    • WPMU DEV Initiate

    Another thing to mention: I am now running 4 scans parallel to each other, and each of them are taking forever and a day. Or rather, the progress bar discontinued to move, while the working circle is still spinning … I must say, the experience hasn’t been the greatest or has met our expectations after all the good things we heard about the service. Lastly, the Hub itself seems a bit lagging at times.

  • Predrag Dubajic
    • Support

    Hi Rich,

    Unfortunately, we can’t do much with that list of the files without checking the content of them to see why Defender might have missed them from the scan.

    If you have this happen again and you have some files Defender missed, can you please provide us with those files so we can investigate them further.

    Another thing to mention: I am now running 4 scans parallel to each other, and each of them are taking forever and a day. Or rather, the progress bar discontinued to move, while the working circle is still spinning

    When you say you’re running 4 parallel scans you’re referring to running them on 4 different sites at the same time, is that correct?
    Are those site perhaps on shared hosting and hosted on the same server?
    File scan can put some load on your server so if all 4 sites are on the same shared hosting it could cause it to go slow down.
    Can you also give me some more information about the setup of your sites, in addition to hosting they are on, how large are the sites, how many plugins and themes you have installed and do you have any other processes running in the background while running file scan (for example backup or something similar that can be resource-heavy)?

    Best regards,
    Predrag