Windows 7 Help needed to remove Torjan.Agent.cn

[Gil80]

Help please.

I'm using Malware Bytes and every restart it quarantines this trojan as svchost.exe

How can I remove it completely?

 

[patcooke]

svchost is a valid Windows application so there are a few possibilities:

It is a false alert to a valid application
It is a valid alert to malware masquerading as svchost
It is an alert to malware which is being executed by svchost (execution of code is the basic function of svchost)

You need to examine more information from the mbam report to identify what is actually happening here.

 

[Gil80]

I'm pretty sure it's a Tojan. I cannot start my security center service nor windows firewall. After each restart I they revert to disabled mode.
when I thought i did remove it, I was able to have them back on but the trojan is up again.

 

[patcooke]

Have you checked the additional data offered by mbam from the scan results?

 

[Gil80]

Im currently solving it.
The steps I've taken can be found here:

How to remove Trojan.agent.cn? Please help! - Malwarebytes Forum

 

[Jimbo22]

I would run Malwarebytes in safemode running a full scan and remove the infection that way.

 

[Joe S]

You might try Virus Total https://www.virustotal.com/ and see what that shows.
Joe