Help needed to remove Torjan.Agent.cn

Gil80

Senior Member
#1
Help please.

I'm using Malware Bytes and every restart it quarantines this trojan as svchost.exe

How can I remove it completely?
 


patcooke

Microsoft MVP
Staff member
Premium Supporter
Microsoft MVP
#2
svchost is a valid Windows application so there are a few possibilities:

It is a false alert to a valid application
It is a valid alert to malware masquerading as svchost
It is an alert to malware which is being executed by svchost (execution of code is the basic function of svchost)

You need to examine more information from the mbam report to identify what is actually happening here.
 


Gil80

Senior Member
#3
I'm pretty sure it's a Tojan. I cannot start my security center service nor windows firewall. After each restart I they revert to disabled mode.
when I thought i did remove it, I was able to have them back on but the trojan is up again.
 


patcooke

Microsoft MVP
Staff member
Premium Supporter
Microsoft MVP
#4
Have you checked the additional data offered by mbam from the scan results?
 


bassfisher6522

Essential Member
#6
I would run Malwarebytes in safemode running a full scan and remove the infection that way.
 


This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.