svchost is a valid Windows application so there are a few possibilities:
It is a false alert to a valid application
It is a valid alert to malware masquerading as svchost
It is an alert to malware which is being executed by svchost (execution of code is the basic function of svchost)
You need to examine more information from the mbam report to identify what is actually happening here.
I'm pretty sure it's a Tojan. I cannot start my security center service nor windows firewall. After each restart I they revert to disabled mode.
when I thought i did remove it, I was able to have them back on but the trojan is up again.