Pagefile.sys listed as trojan

Zehith

Hey, I was running bitdefender as I usually do when I start my pc, and I got a pop up that "D:\pagefile.sys" is infected with "trojan.pws.ebaypass.a" as well as two temp files in bitdefender were also infected with this. Bitdefender deleted it's two temp files but I'm stuck with what it says about pagefile.

From looking up what pagefile.sys is, I'm confused on whether this is a false positive or not. I did run malwarebytes, windows defender, and the two portable versions of hitmanpro and emsisoft emergency kit and they all came back clean.

it is only bitdefender that is having this detection. I ran the rescue environment as bitdefender prompted and again, I am given that pagefile.sys is infected with trojan.PWS.Ebaypass.A.

Is there anyway I can confirm if this is legit or a false positive? Thank you.

(Also I tried to submit this already but it doesn't show on my end that it was actually submitted, so apologies if this shows up twice)

Flexx

https://community.bitdefender.com/en/discussion/101408/pagefile-sys-listed-as-trojan

If you believe that a website or file has been incorrectly blocked by Bitdefender, you can share the details with our malware researchers by filling out the form at the link provided below:

https://www.bitdefender.com/consumer/support/answer/29358/

If the website or file is indeed incorrectly blocked, the detection will be removed within a maximum of 72 hours. However, if the detection still persists after 72 hours, please consider the website or file as malicious, as determined by our malware researchers, and the detection will remain.

Additionally, try clearing the pagefile via Command Prompt by opening it as an administrator and using the command stated below.

1) Disable the pagefile by executing the command as stated below:

wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False

2) Set no paging file by executing the command as stated below:

wmic pagefileset where name="C:\pagefile.sys" delete

3) Restart your PC

4) Re-enable the pagefile by executing the command as stated below:

wmic computersystem where name="%computername%" set AutomaticManagedPagefile=True

Regards