AVG Support Community
Share tips and solutions on AVG Products
Community topics
AllAVG Gurus
These community experts are here to help
-
Alan Binch
-
Borislav Angelov
-
Vladimir Bartl
-
Subhadeep Kanungo
-
Miloslav Serba
Gabriel Monção Recurrent Win64:PUP-gen [PUP] in SppExtComObjHook.dll detectection when starting my computer
Some days ago I'm having a problem when start my machine, which is the detection of Win64:PUP-gen [PUP] in SppExtComObjHook.dll.
AVG moves the dll to quarantine, but every time I reboot the machine, it returns. Does anyone know what it is and how to solve the problem?
Name: Win64:PUP-gen [PUP]
Gravity: 3
File path: C:\Windows\Temp\SppExtComObjHook.dll
Process: C:\Windows\System32\svchost.exe
Detected by: Files module
Status: Blocked.
AVG moves the dll to quarantine, but every time I reboot the machine, it returns. Does anyone know what it is and how to solve the problem?
Name: Win64:PUP-gen [PUP]
Gravity: 3
File path: C:\Windows\Temp\SppExtComObjHook.dll
Process: C:\Windows\System32\svchost.exe
Detected by: Files module
Status: Blocked.
I understand the inconvenience caused. Please share a screenshot of the AVG detection (with "see details" page) to assist you further.
You can post the screenshot here on your topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions.
Best regards,
Alok.
Please delete all temp files from your computer and check if that fix the issue.
To delete the temp files, open run window on your computer and type as "%temp%, delete all the entries.
In the same way type as "temp" and delete all the entries.
If the issue persist, please let us know and we will assist you further.
I have already started my computer in safe mode and cleaned all the temporary file folders and I continue with the problem. I have already tried to look in the task manager for some process related to PUP-gen activity before deleting SppExtComObjHook.dll, but found nothing unusual.
I also tried to start the computer in airplane mode and disable the startup of my browser (Chrome), but the dll appeared in the Temp folder in the same way.
An interesting detail is that the infection only happens one time, shortly after starting the computer, and once moved to quarantine, does not reappear.
I imagine its origin is related to some Windows Host, but I can’t confirm this theory, hahaha.
Please let me know if you are using free or paid version of AVG.
The threats will be shown if they are detected on your PC.
If the PC is clean then it will display as no threats detected.
This is the usual behavior of AVG scan and it doesn't depend on previous removal of threat.
We have sent you an email requesting the diagnostic information to analyze the issue and provide you with a resolution. Please check your inbox and spam box as well and send the requested data to assist you further.
Please let us know the status.
Best regards,
Alok.
Do you have any kind of information on how to solve it , without formatting every thing?
Moreover how this kind of PUP usually goes inside my system without being blocked by antivirus?
We'll help you to get this issue sorted out. This is not the expected behavior from our product. Please provide us the screenshot of the PUP pop up to check and assist you further. Also let us know if you are running the free or paid version of AVG Antivirus/Internet Security.
Thanks,
Vishnu Vardan
Im having the same problem here. Every time that i restart my pc, avg detects that win 64 pup - gen. So, i move it to quarentine, then next time that pc is restarted, the same threat is shown. What should i
do?
Thank you for providing us the screenshot. While verifying the screenshot we can see that the file is from temp, so we suggest you to delete all the temp files from your PC (Windows key + R > run command > %temp% and delete all the temp files). Then run a scan with AVG and see if the threat is again detected by AVG and let us know the status of the issue.
Thanks,
Vishnu Vardan