• Resolved TxFig

    (@txfig)


    I recently upgraded to the premium version and on my first scan, WF tagged a .pdf file as possibly malicious with the detail of :
    This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The text we found in this file that matches a known malicious file is: <rdf:li>01924</rdf:li>\x0a </rdf:Bag>\x0a </dc:subject>\x0a <pdf:Producer>Adobe PDF Library 8.0</pdf:Producer>\x0a <pdf:Keywords>01924. The infection type is: Files often seen in spam infections.

    This is a .pdf I downloaded from the state of Texas Comptroller’s office. I went ahead and re-uploaded it to my website and would like WF to rescan JUST this file (as opposed to scanning the entire site again).

    Is this possible?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hey @txfig,

    Wordfence will surely chime in here but I don’t think it’s possible to specify only one file to scan.

    If it’s only the one file and you want to make sure it’s safe until the next Wordfence full scan runs, maybe you could check it with VirusTotal.

    Hi @txfig

    There is no option currently to scan only one file, the only way I can think of right now if you don’t want to scan the whole site files is to exclude as much folders as you can in “Exclude files from scan that match these wildcard patterns” option. I’m wondering if you are turning on “HIGH SENSITIVITY” scan? as this might lead to false positive results and need manual inspection of the files reported.

    Just a note, premium customers can always open a support ticket from here, as we only provide support for the free version here on the forums.

    Thanks.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Re-scan JUST suspicious files?’ is closed to new replies.