C:\WINDOWS\svchost.exe (Trojan.Agent)

[edprog]

I have ran MalwareBytes multiple times and it tells me to restart immediately to delete the trojan, when i go back its still there.. and I get a bunch of ips being blocked, also another symptom, when i go to google and type anything.. it first sends me through a weird link.. then it converts in an IP url which is then blocked by malware bytes.. here is the log

Malwarebytes Anti-Malware (Trial) 1.60.1.1000

www.malwarebytes.org

Database

version: v2012.02.12.01

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Edwin :: ED_WORK [administrator]

Protection: Enabled

2/11/2012 11:41:10 PM

mbam-log-2012-02-11 (23-41-10).txt

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 288139

Time elapsed: 26 minute(s), 9 second(s)

Memory Processes Detected: 1

C:\WINDOWS\svchost.exe (Trojan.Agent) -> 3492 -> Delete on reboot.

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 1

C:\WINDOWS\svchost.exe (Trojan.Agent) -> Delete on reboot.

(end)

[MrCharlie]

Welcome to the forum, please start at the link below:

http://forums.malwarebytes.org/index.php?showtopic=9573

MrC

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!