Reply to thread

Message

<blockquote data-quote="Parsh" data-source="post: 876452" data-attributes="member: 58090">It won&#039;t pass though a clean re-install. One cannot just remove svchost. If svchost is outside of System32 folder, it would be malicious. If it is inside System32, it may have been clean and was used to download something OR it was infected by a malware.And the below post that I had shared also has methods including scanners that can potentially identify and fix infected svchost.[SPOILER=&quot;Looks like the Clipboard service run under svchost process (see mine)&quot;][ATTACH=full]238150[/ATTACH][/SPOILER]The link Bitdefender blocked for you is apparently a browser file/extension. Cannot say how it got a hit. The link might be a <a href="https://www.virustotal.com/gui/url/43c8b1de94f9c48feff57482f24b4e329b51f0ed02d559541c08f0a4d54792c8/community" target="_blank">false positive</a> ie. Bitdefender is blocking a safe link. I read on another forum that the link is not being blocked anymore.Anyway, since the link got blocked and assuming you didn&#039;t want that action and everything is working fine, there&#039;s no need to panic.Congratulations <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" /></blockquote>

[QUOTE="Parsh, post: 876452, member: 58090"] It won't pass though a clean re-install. One cannot just remove svchost. If svchost is outside of System32 folder, it would be malicious. If it is inside System32, it may have been clean and was used to download something OR it was infected by a malware. And the below post that I had shared also has methods including scanners that can potentially identify and fix infected svchost. [SPOILER="Looks like the Clipboard service run under svchost process (see mine)"] [ATTACH type="full" alt="Screenshot (639).png"]238150[/ATTACH] [/SPOILER] The link Bitdefender blocked for you is apparently a browser file/extension. Cannot say how it got a hit. The link might be a [URL='https://www.virustotal.com/gui/url/43c8b1de94f9c48feff57482f24b4e329b51f0ed02d559541c08f0a4d54792c8/community']false positive[/URL] ie. Bitdefender is blocking a safe link. I read on another forum that the link is not being blocked anymore. Anyway, since the link got blocked and assuming you didn't want that action and everything is working fine, there's no need to panic. Congratulations ;) [/QUOTE]

Verification