Starting today whenever I boot my pc I get an AVG alert saying 2 threats detected. They are both Trojan horse Patched4_c.CHQT and they are located at c:\Windows\Temp\SppExtComObjHook.dll
Under view details it shows the process name is c:\Windows\System32\svchost.ext
I've clicked on resolve problem and it says all items were resolved, status secured. But every time I restart my computer AVG pops up showing the same 2 threats.
I haven't made any recent changes on my PC or downloaded any files at all or been to any suspicious websites. The only thing I've done is windows updates yesterday. I'm running windows 10. Also Malwarebytes doesn't detect any problems.
Can someone explain if this is a problem or what is going on? Thanks for any help.
At each start, this dll is detected as a virus and AVG remove it, nothing was installed or downloaded. I used softwares like Ccleaner to get my computer great. All software that are installed are also only those i know.
I tried to send info with your AVG SysInfo Tool, but after 3 hours, infos were still not sended.
Hello Richard, We regret for the inconvenience. The sysinfo will generally take time to upload the information to the AVG server. This process depends on the Network speed of your computer and the size of the file that is collected. Once the file is successfully uploaded, we will check the log and provide you a best solution. Thank you
Since yesterday I have exact the same problem. Trojan Horse patched4_c.CHQT in c:\windows\temp\SppExtCom0bjHook.dll under procesname svchost.exe. Nothing helps to permanently delete this trojan. It gets resolved when i click resolve in AVG, but after a reboot from my PC i get the same c:\windows\temp\SppExtCom0bjHook.dll trojan error again in AVG. @AVG help us!
Exact same problem since 13th of July with AVG AntiVirus FREE and Windows 10. Threat is Trojan Patched4_c.CHQT, SppExtComObjHook.dll, process svchost.exe
Removed it each time, but returns after restart. Tried some third party tools too (anti adware scans etc.) no results.
I also have the same problem. I have tried restoring to a previous restore point but the trojan still appears. I am currently using the free version of avg.
I get the exact samething everytime I restart my computer too and I click protect me but it comes back after restarting. I have also sent in my diagnostic information too. I am using the free avg
Leonardo, If you have uploaded the diagnostic information, our senior technical team will get back to you via email with a resolution. Please be patient and keep checking your email. Thank you.
AVG detected A trojan called "Troyano Patched4_c.CHQT" in my computer; AVG says the problem is solved , but each time I enter Windows 10 I receive the infection alert again and again. I have been using AVG Internet Security Pro for about 10 years; never before I have had this kind of problem I am surprised and worried this time
Exact same problem everyone... I currently run Windows 10 and after the update I have done this is showing up, I am scared but Im happy Im not just the only one, I have no clue what to think about that. I have never had any problems except for this one problem and this one seems to be recent too. (so after the win10 update.)
I just sent the info. I've seen that the virus doesn't affect connection or operativity, but is annoying to see the virus message every Windows start. Thanks for the help you could make for us.
Any updates to this situtation? my AVG anti-virus also started detecting this a few days ago after I turned off my computer with the "update and shutdown" option. There doesn't seem to be too many people reporting this issue, but the ones that do all have the common story of updating and the next time they booted up it was detected by AVG. Hopefully our computers are not compromised.
I've tried switching off AVG and trying two other anti virus programs and they aren't picking anything up. Hopefully this is just a false positive in AVG's database otherwise I might reformat :(.
Closely monitoring this thread for replies from AVG representatives. Please let us know!
I also started to see this exact trojan Patched4_c.CHQT detected by AVG every time I restart Windows 10. AVG lets me protect and clean it out, but it reappears on every Windows restart.
I've tried running AVG in safe mode (it detected and cleaned out high severity detections, but didn't fix the prompts on every restart), and even tried uninstalling AVG to try running Windows Defender and Avast (neither of which seem to detect Patched4_c.CHQT).
This started showing up over the past couple days, as far as I recall. Any ideas on what to do? I'd much prefer not to reformat Windows as the nuclear option, but it's risky to leave this as-is if this trojan is real.
@ Zyhn yo / D S / Neil Merrick / George Goldsmith / Will N / Gordon M Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required. AVG Guru
Hello, am running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next? Hate to rebuild system this take over 6 plus hours.
After running rkill, malwarebytes AM, adwcleaner, junkware removal tool, and hitman pro, AVG would still pick up that SppExtComObjHook.dll was a threat every time I started my computer. This file is in C:\Windows\Temp on my PC, so as soon as I start up I go to that folder and can watch that file pop up after a few seconds and then AVG notifies me of it's presence. So I tried something simple and so far it's working...
Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a file as "SppExtComObjHook.dll".
After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
Same problem. Windows 10, free AVG. started July 12 or 13. SppExtComObjHook.dll every time I start my computer, the file is in C:\Windows\Temp. Concerned and waiting for an answer from AVG.
P.S. I forgot to add that I have tried 3 times to use the SysInfo tool to upload my information, but it seems to hang after a pop-up goes through various file locations. It gets approximately 20% done on the progress bar and then never moves any further. I shut it down after 20 minutes of waiting.
I also have tried using the SysInfo tool, and after TWO whole hours of waiting, sent the output back and never heard back from anyone at AVG....very annoying.
Also experiencing problem with Trojan Horse Patched4_c.CHQT, detected by AVG Free on system running Windows 10. File opened in Windows Temp as SppExtComObjHook.dll. Unclear how to access SysInfo tool and would be grateful for advice.
The same problem after 15 July: have I to consider it as a fake virus that only AVG detects? or a malicious Windows update? Can someone of AVG team tell us what to do ASAP please?
I restored the image of my notebook of 6 months ago and AVG found the virus (SppExtComObjHook.dll).
IMHO it's a little bit difficult I had this virus so long time ago, anyway..
This is what I did: - restored the image of 6 months ago - performed AVG scan (without connecting the computer to Internet, without AVG updates) => no virus found - restarted computer - performed AVG scan => no virus found - connected the computer to Internet (without many programs like Dropbox, Skype, Chrome, etc) so that only AVG should be updated - performed AVG scan => no virus found - restarted computer - performed AVG scan => virus (SppExtComObjHook.dll) found!!
My real suspect is that the recent version of AVG detects virus where 6 months it didn't detect it! Isn't it a *fake* detection?
Andy Mechmet, about your trick ("Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a file as "SppExtComObjHook.dll") I can't create it where AVG detected/removed the file because of missing authorization.. (even if I perform it from command shell lauched as admin)
Hello Brian, We regret for the inconvenience caused. We would like to inform you that the issue which you are currently experiencing is fixed from our side. We request you to update your AVG program. Once the AVG program is updated successfully,try to restart your system and check it once with your application.. The following article explains how to update the http://support.avg.com/SupportArticleView?urlname=How-to-update-AVG your AVG Program. If the issue persists, please let us know by upcoming post we are here to help you. Thank you.
After seeing your post I just now updated AVG and restarted my PC and the problem is still not fixed. It's still showing a threat detected from the same process name c:\Windows\System32\svchost.ext
But now the type of threat has changed to Tool_c.DV
It has the same object name and process name but a different threat type. So it seems that the AVG software doesn't know what the problem is or how to deal with it. It's no coincidence that the problem started occuring immediately after a Windows update. I'm almost %100 certain that the problem is not a virus but instead a glitch or false detection with the AVG software.
After my original post I did download the SysInfo tool and sent in my diagnostic information. They recently contacted me and offered to remote connect to my computer in order to try and solve the problem. I haven't had time to do that yet but I guess I should give them credit for offering. Although I'm kind of leery of letting someone remote connect to my computer. I still feel like this is just a false detection issue with the AVG software and hopefully they will get it sorted out.
Sorry for the inconvenience caused. We request you to go ahead in getting the remote support help of our level two technical team so that they can analyze the issue and fix it. Through our remote support we can securely access your computer and perform the necessary tasks to fix the issue. You can see our live session and chat with the customer service representative. If you feel your privacy is being compromised, please feel free to revoke the remote desktop permission at any point of time by just clicking "X" mark in the right top corner of the chat window.
I've just updated AVG and restarted my notebook, however at Windows startup AVG still alerts about virus..
The suspected file is always the same (c:\Windows\Temp\SppExtComObjHook.dll) but the virus isn't Patched4_c.CHQT: this time is Tool_c (http://www.avgthreatlabs.com/ww-en/virus-and-malware-information/pu/free/?utm_source=TDPU&utm_medium=RS&CTRY=it&LNG=us&PRTYPE=AVF&V=2016&AI=0&BE=21198618&IDNT=QEVJRF9JZF9wZ218JW5hbWUlPVRvb2xfYy5EVg&IDN=YzpcV2luZG93c1xUZW1wXFNwcEV4dENvbU9iakhvb2suZGxs).
The previous seemed to be a very dangerous one, while this should be a simple "potential unwanted application" which AVG lets me decide to remove or not!
Well.. AVG Team, please tell us:
1) have you fixed your software to avoid that kind of false positive?
2) why are you still detecting a form of virus (Tool_c), even if more inoffensive?
For your information I erased my computer a lot of time because of your detection! Fortunately I have an old image of my notebook, but certainly I'm not so happy still fighting after 1 week..
Hello Mhaxx, We are sorry to know that the issue persists. Could you please provide a screen-shot (http://avgread.me/1aZxsAV) of the AVG alert pop-up for better assistance. Thank you.
Mhaxx, For your info, just in case that you are unaware, you can post the screenshot here in your topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions. AVG Guru
AVG needs to have a anti-virus program, that comes on and runs through the complete regester program ( all files that boot up on a computer, when a computer is first turned on). The AVG program should be able to shut down the computer after updating all anti-virus downloads, and reboot the computer on it's won, and run through each and every file programmed within a computer as it is booting up, not run after the computer has booted up, and running. The regester files are skipped, and not checked, therefore AVG misses many pieces of hidden malware viruses within the boot-up rejester programming. I used a "Fix-Me Stick" to both find and get rid of, hidden malware within the regester programming used when booting up my computer. Had this stick not run through the regester section used during boot-up, I would not have got rid of them completely. AVG programming missed them completely, and failed to either find, or remove them off my computer. The regester section should never be skipped, when looking for viruses, as this is mainly where they are installed, and are hidden. A good anti-virus program goes through a complete computer's programming, from first startup, to shut-down programming, and all between those two points. If it doesn't, it fails in doing the job one pays for to keep their computer running properly at all times. AVG programming should be more like the "Fix-Me-Stick". It begins with updating it's anti-virus files, then shuts down your computer, and reboots it on it's own, and starts checking for viruses right from the very beginning of the boot up programming, and continues searching for viruses till it has gone through every one of your computers programs (start to finish) Once it has gone through all your prgramms, it reboots back using Wins. programming. While "Fix-Me-Stick" is running, it uses its very own personal programming throughout the virus searching process, not Wins. programming. This way, all viruses are caught and removed in the Wins. programming, before you begin booting up using Wins. OS. This way, when you begin using Wins OS, you know for sure all virus have been removed, while operating your computer. Think about this AVG, and design a program like "Fix-Me Stick". Your users depend on you, to keep their computers free of viruses at all times.
We are sorry to know that you are still facing the issue. Thank you for providing the screenshot. In this case, we have sent you the email instructions to get our level two technical support help. Please check for the email on spam or junk folders if it is not present in the inbox.
Sorry to know that you are facing the same issue as others. Do you have the AVG free, trial or paid version installed? Also mention whether you have installed the latest 2016 version of AVG free antivirus?
Hello Mhaxx, We regret for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated. Thank you.
I have the same problem, when I restart my pc it find again.
I´m running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next?
I have the same issue as everyone else and cannot use the trick to pu the fake file to the folder since even if I grant myself permission exactly as in tutorials, the system does not let mu put the file there. Please help!
I don't know how but I could rename c:\Windows\Temp\SppExtComObjHook.dll into a different file, move it away and create an empty one in place of the original one.
I also have this issue and have followed all the suggestions above. Looking forward to a solution, after much effort and using many different maleware and antivirus softwares, the only one reporting an issue is AVG. Thanks in advance. PS I am using Windows 10 and AVG free version
Hello Euan, We apologize for the inconvenience. We are working on a fix for this issue. Please stay connected to know further update for the fix. Thank you.
I also have the exact same issue as everyone else here. I am running the free version of AVG, completely up-to-date. Please help. Tried the fake temp file; did not work.
Hello Dan, We apologize for the inconvenience. We are working on a fix for this issue. Please stay connected to know further update for the fix. Thank you.
If you have a problem with creating a file in the TEMP directory rename the directory c:\Windows\temp on the c:\Windows\temp1 create a file SppExtComObjHook.dll rename the directory c:\Windows\temp1 on the c:\windows\temp
Did you submit the threat detected sample to us using this link: http://www.avg.com/submit-sample ? Do you use a free, trial or paid version of AVG Antivirus program?
Hello Mhaxx, Thank you for providing the information. We can see that your case has been escalated to our senior technical team and we are hardly working to resolve the issue. Once we get the optimal resolution we will contact you through your registered email address. Your patience is much appreciated. Thank you.
Hello Mhaxx, We can really understand your concern. Pleased be patience and our developers are really working hard to resolve the issue. Once we analyze the root cause of the issue we will find the complete resolution to fix it.Your patience is much appreciated. Thank you.
Hello Euan, We apologize if an AVG product did not meet your expectations. Our main goal is to keep our customers happy.
AVG carefully monitors the quality of our products and the service we provide, therefore all feedback from our customers is important to us. If you have a specific experience with AVG products that you would like to share with us here http://avgclick.me/AVGfeedback , we would appreciate hearing about it.
Hello Mhaxx, We are sorry for the delay caused. Could you please confirm to us if you have already submitted the form https://secure.avg.com/submit-sample ?If so , when did you 'submit' the form? Thank you.
Same problem here since 3 weeks. Every time, when i start the Pc, the AVG (AVG Internet Security 16.91.7690) found a "potentoinal unwanted application: Tool_c.dv".
C:\Windows\Temp\DppExtComObjHook.dll
When i click to "Protect me", the avg "kills" the "virus". But on the next startup, the all proceed starts again. Every startups...
Hello Antal, We apologize for the inconvenience caused. Could you please let me know the name of the AVG product you have installed in your pc? also provide us the screenshot http://avgclick.me/getscreenshot of the issue you are facing? so that we can assist you better in fixing it. Feel free to contact us for any further assistance. Thank you.
Hello Mhaxx, We apologize for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated. Thank you.
@ Antal Basa Antal, Also for your info, just in case that you are unaware, you can post the screenshot here in the topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions. AVG Guru
Thanks Kishore (AVG Technologies), I like AVG and its always done a great job for me, sorry to tell you I fixed the problem with a competitor product, its a valid troubleshooting step!!! ;-) My wife and family still use AVG and they don't have this problem, so I at first tried to fix the issue, result is my computer has had a good tune up, very clean and fast to restart now!
Hello all, From the screen-shot we could understand that Tool_c.DV detection is PUP related to the KMS aplications which are used for illegal activation of Microsoft products. We recommend either uninstalling the application or disable PUP scans in AVG .Thank you.
Had the same issues. Delete autoKMS folder probably in c:\windows\autokms and will be resolved. The file is created by kmsspico or autokms or similar and is created in win/temp at each start of pc where it checks if needed to activate office.....
AVG Team: your antivirus is the only one that consider it as virus (take a look at https://m.reddit.com/r/techsupport/comments/4swn5q/can_i_save_my_computer_without_having_to/)
Hello Mhaxx, Sorry, we couldn't access any other links due to our company's security policy. Do you have any other third party antivirus program installed along with AVG?
Hello Mhaxx, As we said earlier that Tool_c.DV detection is PUP related to the KMS applications which are used for illegal activation of Microsoft products. We have suggested in the earlier post either to disable or uninstall the application since you have already disable the application and it didn't work we request you to uninstall the application and try to Scan through AVG. If the issue is still persist please let us know we are here to help you. Thank you.
I think that AVG has to say if that program is or not a virus, since PUP only means "potentially" unwanted program.. about the program it's a long story and I can't remove it
Hello Mhaxx, We regret for the inconvenience caused. We suggest you to make sure if you are using a latest version(2016) of AVG and then repair your AVG (avgclick.me/RepairAVG). If the issue persists, we suggest you to temporarily disable your AVG program (http://avgclick.me/TempDisableAVG) in order to avoid the pop-up and then fill the form https://secure.avg.com/submit-sample .Thank you.
AVG Team, I've just sent SppExtComObjHook.dll via email as requested by you.
I hope this time you can analyze it and say if it's a false positive or a real dangerous program.
We know it's origin (AutoKMS) but we want to know if you'll degrade to genuine file or not, that is if we could exclude it from AVG, because of AVG is the only antivirus which detects it.
Hello Mhaxx, Thank you for reaching out to us with your concerns. We can see that you have been submitted your samples to our developers and case has been escalated already with high priority. We are really working on it to fix the issue. Once we find the optimal resolution we will get back through your email. Your patience is much appreciated. Thank you.
Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a file as "SppExtComObjHook.dll".
After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
You can find answer to your question together with your another post. Please try keep whole conversation in one question/thread to speed up resolution.
User a Laci has posted their own topic (https://support.avg.com/answers?id=906b0000000DNfbAAG). a Laci, In future please refrain from carrying out multiple postings on the same subject! You won't obtain an answer to your query any faster!. AVG Guru
@ Jan Schrik Jan, If you look again @ the other user a Laci posting you'll see that advice was actually provided by Kishore (AVG Technologies) to the user regarding the issue. AVG Guru
Solved my problem with this by disabling potentiall unwanted applications in advanced settings but putting a notepad file in the temp folder given called sppextcomobjhook.dll also works
Thank you for the information, Brian. In this case, we suggest you to add this program to AVG exception list http://avgclick.me/AddException. And also send a sample of this file to AVG, so that we can check this and add this to AVG whitelist server https://secure.avg.com/submit-sample. Thank you
Thank you for your feedback on this issue. We appreciate your co-operation.
Thank you,
Karthikeyan AVG Customer Care.
At each start, this dll is detected as a virus and AVG remove it, nothing was installed or downloaded.
I used softwares like Ccleaner to get my computer great.
All software that are installed are also only those i know.
I tried to send info with your AVG SysInfo Tool, but after 3 hours, infos were still not sended.
We regret for the inconvenience.
The sysinfo will generally take time to upload the information to the AVG server. This process depends on the Network speed of your computer and the size of the file that is collected.
Once the file is successfully uploaded, we will check the log and provide you a best solution.
Thank you
Since yesterday I have exact the same problem. Trojan Horse patched4_c.CHQT in c:\windows\temp\SppExtCom0bjHook.dll under procesname svchost.exe. Nothing helps to permanently delete this trojan. It gets resolved when i click resolve in AVG, but after a reboot from my PC i get the same c:\windows\temp\SppExtCom0bjHook.dll trojan error again in AVG.
@AVG help us!
Sorry to know that you are facing the same issue.
Could you please let us know whether you have installed the free, trial or paid version of AVG?
Threat is Trojan Patched4_c.CHQT, SppExtComObjHook.dll, process svchost.exe
Removed it each time, but returns after restart. Tried some third party tools too (anti adware scans etc.) no results.
If you have uploaded the diagnostic information, our senior technical team will get back to you via email with a resolution. Please be patient and keep checking your email. Thank you.
I have had this kind of problem I am surprised and worried this time
We regret for the inconvenience caused. Please run the AVG sysinfo tool and submit the output to us to analyze it and help you further.
My computer is running very slow now.
I've tried switching off AVG and trying two other anti virus programs and they aren't picking anything up. Hopefully this is just a false positive in AVG's database otherwise I might reformat :(.
Closely monitoring this thread for replies from AVG representatives. Please let us know!
I've tried running AVG in safe mode (it detected and cleaned out high severity detections, but didn't fix the prompts on every restart), and even tried uninstalling AVG to try running Windows Defender and Avast (neither of which seem to detect Patched4_c.CHQT).
This started showing up over the past couple days, as far as I recall. Any ideas on what to do? I'd much prefer not to reformat Windows as the nuclear option, but it's risky to leave this as-is if this trojan is real.
Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
Thank you Gary.
Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a file as "SppExtComObjHook.dll".
After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
Tony, Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
Because svchost.exe seems to be a windows process (so no danger from that), so this dll is maybe not dangerous
@AVGteam, what do you think about that ? thank you
I restored the image of my notebook of 6 months ago and AVG found the virus (SppExtComObjHook.dll).
IMHO it's a little bit difficult I had this virus so long time ago, anyway..
This is what I did:
- restored the image of 6 months ago
- performed AVG scan (without connecting the computer to Internet, without AVG updates) => no virus found
- restarted computer
- performed AVG scan => no virus found
- connected the computer to Internet (without many programs like Dropbox, Skype, Chrome, etc) so that only AVG should be updated
- performed AVG scan => no virus found
- restarted computer
- performed AVG scan => virus (SppExtComObjHook.dll) found!!
My real suspect is that the recent version of AVG detects virus where 6 months it didn't detect it! Isn't it a *fake* detection?
Hey, AVG Team: could you kindly reply ASAP?
Any idea?
just change the name of another file here
We regret for the inconvenience caused. We would like to inform you that the issue which you are currently experiencing is fixed from our side. We request you to update your AVG program. Once the AVG program is updated successfully,try to restart your system and check it once with your application.. The following article explains how to update the http://support.avg.com/SupportArticleView?urlname=How-to-update-AVG your AVG Program. If the issue persists, please let us know by upcoming post we are here to help you.
Thank you.
But now the type of threat has changed to Tool_c.DV
It has the same object name and process name but a different threat type. So it seems that the AVG software doesn't know what the problem is or how to deal with it. It's no coincidence that the problem started occuring immediately after a Windows update. I'm almost %100 certain that the problem is not a virus but instead a glitch or false detection with the AVG software.
After my original post I did download the SysInfo tool and sent in my diagnostic information. They recently contacted me and offered to remote connect to my computer in order to try and solve the problem. I haven't had time to do that yet but I guess I should give them credit for offering. Although I'm kind of leery of letting someone remote connect to my computer. I still feel like this is just a false detection issue with the AVG software and hopefully they will get it sorted out.
Sorry for the inconvenience caused.
We request you to go ahead in getting the remote support help of our level two technical team so that they can analyze the issue and fix it.
Through our remote support we can securely access your computer and perform the necessary tasks to fix the issue.
You can see our live session and chat with the customer service representative.
If you feel your privacy is being compromised, please feel free to revoke the remote desktop permission at any point of time by just clicking "X" mark in the right top corner of the chat window.
The suspected file is always the same (c:\Windows\Temp\SppExtComObjHook.dll) but the virus isn't Patched4_c.CHQT: this time is Tool_c (http://www.avgthreatlabs.com/ww-en/virus-and-malware-information/pu/free/?utm_source=TDPU&utm_medium=RS&CTRY=it&LNG=us&PRTYPE=AVF&V=2016&AI=0&BE=21198618&IDNT=QEVJRF9JZF9wZ218JW5hbWUlPVRvb2xfYy5EVg&IDN=YzpcV2luZG93c1xUZW1wXFNwcEV4dENvbU9iakhvb2suZGxs).
The previous seemed to be a very dangerous one, while this should be a simple "potential unwanted application" which AVG lets me decide to remove or not!
Well.. AVG Team, please tell us:
1) have you fixed your software to avoid that kind of false positive?
2) why are you still detecting a form of virus (Tool_c), even if more inoffensive?
For your information I erased my computer a lot of time because of your detection! Fortunately I have an old image of my notebook, but certainly I'm not so happy still fighting after 1 week..
We are sorry to know that the issue persists. Could you please provide a screen-shot (http://avgread.me/1aZxsAV) of the AVG alert pop-up for better assistance. Thank you.
AVG Guru
Here's the alert:
We are sorry to know that you are still facing the issue.
Thank you for providing the screenshot.
In this case, we have sent you the email instructions to get our level two technical support help.
Please check for the email on spam or junk folders if it is not present in the inbox.
I have exactly the same issue like Mhaxx Mhaxx. Could you please provide me instructions how to get rid of this crap on my laptop?
Thanks.
Sorry to know that you are facing the same issue as others.
Do you have the AVG free, trial or paid version installed?
Also mention whether you have installed the latest 2016 version of AVG free antivirus?
We regret for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated. Thank you.
I´m running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next?
AVG Team: my computer is blocked from more than 15 days about this suspected false positive! Could you kindly fix it ASAP??
Now AVG doesn't detect virus anymore: am I safe??
Thanks in advance.
PS I am using Windows 10 and AVG free version
We apologize for the inconvenience.
We are working on a fix for this issue. Please stay connected to know further update for the fix.
Thank you.
We apologize for the inconvenience.
We are working on a fix for this issue. Please stay connected to know further update for the fix.
Thank you.
rename the directory c:\Windows\temp on the c:\Windows\temp1
create a file SppExtComObjHook.dll
rename the directory c:\Windows\temp1 on the c:\windows\temp
We all need to know if THIS IS OR NOT a virus!
Did you submit the threat detected sample to us using this link: http://www.avg.com/submit-sample ?
Do you use a free, trial or paid version of AVG Antivirus program?
I've already sent the collected info in my system some days ago from my email.
Thank you for providing the information. We can see that your case has been escalated to our senior technical team and we are hardly working to resolve the issue. Once we get the optimal resolution we will contact you through your registered email address. Your patience is much appreciated. Thank you.
We can really understand your concern. Pleased be patience and our developers are really working hard to resolve the issue. Once we analyze the root cause of the issue we will find the complete resolution to fix it.Your patience is much appreciated. Thank you.
We apologize for the inconvenience.
Could you please let us know if you are having this issue in PC or laptop?
Thank you.
We apologize if an AVG product did not meet your expectations. Our main goal is to keep our customers happy.
AVG carefully monitors the quality of our products and the service we provide, therefore all feedback from our customers is important to us. If you have a specific experience with AVG products that you would like to share with us here http://avgclick.me/AVGfeedback , we would appreciate hearing about it.
We are sorry for the delay caused. Could you please confirm to us if you have already submitted the form https://secure.avg.com/submit-sample ?If so , when did you 'submit' the form? Thank you.
C:\Windows\Temp\DppExtComObjHook.dll
When i click to "Protect me", the avg "kills" the "virus". But on the next startup, the all proceed starts again. Every startups...
We apologize for the inconvenience caused.
Could you please let me know the name of the AVG product you have installed in your pc? also provide us the screenshot http://avgclick.me/getscreenshot of the issue you are facing? so that we can assist you better in fixing it.
Feel free to contact us for any further assistance. Thank you.
Download it from http://www.filedropper.com/sppextcomobjhook and rename it to SppExtComObjHook.dll as the original one.
I've already sent the collected info in my system some days ago from my email
We apologize for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated.
Thank you.
Antal, Also for your info, just in case that you are unaware, you can post the screenshot here in the topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions.
AVG Guru
The detection is the same like Mhaxx, posted on 23th. july:
When i choose to "Protect Me"... let the screenshot talk:
So now, its deleted, problem solved... (?)
But on the next startup, everything starts again...
From the screen-shot we could understand that Tool_c.DV detection is PUP related to the KMS aplications which are used for illegal activation of Microsoft products. We recommend either uninstalling the application or disable PUP scans in AVG .Thank you.
Has another antivirus removed the virus or simply not detected the virus that AVG detects?
Had the same issues. Delete autoKMS folder probably in c:\windows\autokms and will be resolved.
The file is created by kmsspico or autokms or similar and is created in win/temp at each start of pc where it checks if needed to activate office.....
Thank you for sharing the workaround.
We really appreciate your efforts.
AVG Team: in this case is c:\Windows\Temp\SppExtComObjHook.dll really a dangerous virus or not?
What does it mean, is it a fake?
Sorry, we couldn't access any other links due to our company's security policy.
Do you have any other third party antivirus program installed along with AVG?
As we said earlier that Tool_c.DV detection is PUP related to the KMS applications which are used for illegal activation of Microsoft products. We have suggested in the earlier post either to disable or uninstall the application since you have already disable the application and it didn't work we request you to uninstall the application and try to Scan through AVG. If the issue is still persist please let us know we are here to help you. Thank you.
We do understand your concern, if you suspect this program is a genuine one and it is a false detection from AVG, you can send the application to AVG whitelist service http://support.avg.com/SupportArticleView?urlname=What-is-AVG-Whitelisting-service and also you can add the exception of the program from AVG scan. Use this link for the steps to add the program to AVG exception list http://avgclick.me/AddException
Thank you.
I'm trying to send it to you again via email but I can't get it since AVG goes on alerting me when I try to select or zip..
We regret for the inconvenience caused. We suggest you to make sure if you are using a latest version(2016) of AVG and then repair your AVG (avgclick.me/RepairAVG). If the issue persists, we suggest you to temporarily disable your AVG program (http://avgclick.me/TempDisableAVG) in order to avoid the pop-up and then fill the form https://secure.avg.com/submit-sample .Thank you.
I hope this time you can analyze it and say if it's a false positive or a real dangerous program.
We know it's origin (AutoKMS) but we want to know if you'll degrade to genuine file or not, that is if we could exclude it from AVG, because of AVG is the only antivirus which detects it.
Looking forward to hearing from you ASAP!
Thank you for reaching out to us with your concerns. We can see that you have been submitted your samples to our developers and case has been escalated already with high priority. We are really working on it to fix the issue. Once we find the optimal resolution we will get back through your email. Your patience is much appreciated. Thank you.
Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a file as "SppExtComObjHook.dll".
After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
You can find answer to your question together with your another post. Please try keep whole conversation in one question/thread to speed up resolution.
Thank you.
a Laci, In future please refrain from carrying out multiple postings on the same subject! You won't obtain an answer to your query any faster!.
AVG Guru
Not much of a solution to the original problem. Mentioning cross-posting is also off -topic
Jan, If you look again @ the other user a Laci posting you'll see that advice was actually provided by Kishore (AVG Technologies) to the user regarding the issue.
AVG Guru
yes I am using KMS before you ask
hope this helps
Are you sure that the threat detected isn't a harmful one for your PC?
Thank you