Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Gabriel MonçãoGabriel Monção 

Recurrent Win64:PUP-gen [PUP] in SppExtComObjHook.dll detectection when starting my computer

Some days ago I'm having a problem when start my machine, which is the detection of Win64:PUP-gen [PUP] in SppExtComObjHook.dll.
AVG moves the dll to quarantine, but every time I reboot the machine, it returns. Does anyone know what it is and how to solve the problem?

Name: Win64:PUP-gen [PUP]
Gravity: 3
File path: C:\Windows\Temp\SppExtComObjHook.dll
Process: C:\Windows\System32\svchost.exe
Detected by: Files module
Status: Blocked.
Alok KumarAlok Kumar (Avast)
Hello Gabriel,
I understand the inconvenience caused. Please share a screenshot of the AVG detection (with "see details" page) to assist you further.
You can post the screenshot here on your topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions.
Best regards,
Alok.
Gabriel MonçãoGabriel Monção
Screenshot of the AVG detection
KarthikeyanKarthikeyan (Avast) 
Thank you for the screenshot.

Please delete all temp files from your computer and check if that fix the issue.

To delete the temp files, open run window on your computer and type as "%temp%, delete all the entries.

In the same way type as "temp" and delete all the entries.

If the issue persist, please let us know and we will assist you further.
Gabriel MonçãoGabriel Monção
Hello, good day.
I have already started my computer in safe mode and cleaned all the temporary file folders and I continue with the problem. I have already tried to look in the task manager for some process related to PUP-gen activity before deleting SppExtComObjHook.dll, but found nothing unusual.
I also tried to start the computer in airplane mode and disable the startup of my browser (Chrome), but the dll appeared in the Temp folder in the same way.
An interesting detail is that the infection only happens one time, shortly after starting the computer, and once moved to quarantine, does not reappear.
 I imagine its origin is related to some Windows Host, but I can’t confirm this theory, hahaha.
 
KarthikeyanKarthikeyan (Avast) 
Thank you for the detailed information.

Please let me know if you are using free or paid version of AVG.
Gabriel MonçãoGabriel Monção
I'm using the free version. The "deep scanning" can't find other malwares after deleting the PUP gen.
User-added image
Balasubramanian SBalasubramanian S (Avast) 
Thank you for the information.
The threats will be shown if they are detected on your PC.
If the PC is clean then it will display as no threats detected.
This is the usual behavior of AVG scan and it doesn't depend on previous removal of threat.
Gabriel MonçãoGabriel Monção
Yes I know. But every time I start my computer the PUP gen appears again. AVG detects and deletes it while the computer is still on, but it is only to turn off the computer that it comes back again, and so on...
-980888528-980888528 (Avast)
Sorry for the trouble, Gabriel.

We have sent you an email requesting the diagnostic information to analyze the issue and provide you with a resolution. Please check your inbox and spam box as well and send the requested data to assist you further. 
Gabriel MonçãoGabriel Monção
I was traveling on the weekend, so I only saw the emails now. I am running AVG SysInfo now.
KarthikeyanKarthikeyan (Avast) 
Thank you for the information.

Please let us know the status.
Gabriel MonçãoGabriel Monção
AVG SysInfo does not give me a computer status, it just generated a diagnostic output to be sent to AVG. I already sent, as explained by you in the email. Here is screenshot with screen template that came up after running AVG SysInfo, before I answer and send output. I'm waiting for the analysis of data sent.
Diagnostic output before answers
Alok KumarAlok Kumar (Avast)
Gabriel, we have received the log files and our senior team is analyzing the situation and they will contact you via email soon with a resolution at earliest.
Best regards,
Alok.
Gabriel MonçãoGabriel Monção
Thank you, bro. And thanks for all AVG team.
Antonino PecoraAntonino Pecora
Dear all , I have exctly same problem as Gabriel. 
Do you have any kind of information on how to solve it , without formatting every thing?
Moreover how this kind of PUP usually goes inside my system without being blocked by antivirus? 
Vishnu VardanVishnu Vardan (Avast)
Hi Antonino,

We'll help you to get this issue sorted out. This is not the expected behavior from our product. Please provide us the screenshot of the PUP pop up to check and assist you further. Also let us know if you are running the free or paid version of AVG Antivirus/Internet Security.

Thanks,
Vishnu Vardan
Daniel LeiteDaniel Leite
btw, im using Free ediction 
Daniel LeiteDaniel Leite
hey, guys,
Im having the same problem here. Every time that i restart my pc, avg detects that win 64 pup - gen. So, i move it to quarentine, then  next time that pc is restarted, the same threat is shown. What should i
do? win 64 pup gen
Vishnu VardanVishnu Vardan (Avast)
Hi Daniel,

Thank you for providing us the screenshot. While verifying the screenshot we can see that the file is from temp, so we suggest you to delete all the temp files from your PC (Windows key + R > run command > %temp% and delete all the temp files). Then run a scan with AVG and see if the threat is again detected by AVG and let us know the status of the issue.

Thanks,
Vishnu Vardan
Branko DencicBranko Dencic
To anyone having same problem: It is related to tool that you have used to illegaly activate windows. Only way to resolve it is to buy legal copy and do fresh install of system. For more info see: https://forum.avast.com/index.php?topic=197394.0
Ask a question
Struggling with non-AVG technology? We can fix that, too!