Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Brian MootyBrian Mooty 

Trojan horse Patched4_c.CHQT

Starting today whenever I boot my pc I get an AVG alert saying 2 threats detected. They are both Trojan horse Patched4_c.CHQT and they are located at c:\Windows\Temp\SppExtComObjHook.dll

Under view details it shows the process name is c:\Windows\System32\svchost.ext

I've clicked on resolve problem and it says all items were resolved, status secured. But every time I restart my computer AVG pops up showing the same 2 threats.

I haven't made any recent changes on my PC or downloaded any files at all or been to any suspicious websites. The only thing I've done is windows updates yesterday. I'm running windows 10. Also Malwarebytes doesn't detect any problems.

Can someone explain if this is a problem or what is going on? Thanks for any help.
Michael PlaskotaMichael Plaskota
Are you running a fugazi MS Office on your computer?  Looks like this might be causing AVG to detect the threat. 
KarthikeyanKarthikeyan (Foundever) 
Hello Michael,
Thank you for your feedback on this issue. We appreciate your co-operation.
Thank you,
Karthikeyan AVG Customer Care.
Richard HoldRichard Hold
Hello, i got the same problem on windows 8.1. 

At each start, this dll is detected as a virus and AVG remove it, nothing was installed or downloaded.
I used softwares like Ccleaner to get my computer great.
All software that are installed are also only those i know.

I tried to send info with your AVG SysInfo Tool, but after 3 hours, infos were still not sended.
KarthikeyanKarthikeyan (Foundever) 
Hello Richard,
We regret for the inconvenience.
The sysinfo will generally take time to upload the information to the AVG server. This process depends on the Network speed of your computer and the size of the file that is collected.
Once the file is successfully uploaded, we will check the log and provide you a best solution.
Thank you
Milad DaliriMilad Daliri
Hello,

Since yesterday I have exact the same problem. Trojan Horse patched4_c.CHQT in c:\windows\temp\SppExtCom0bjHook.dll under procesname svchost.exe. Nothing helps to permanently delete this trojan. It gets resolved when i click resolve in AVG, but after a reboot from my PC i get the same c:\windows\temp\SppExtCom0bjHook.dll trojan error again in AVG.
@AVG help us!
Balasubramanian SBalasubramanian S (Avast) 
Hello Milad,

Sorry to know that you are facing the same issue.
Could you please let us know whether you have installed the free, trial or paid version of AVG?
James JamesonJames Jameson
Exact same problem since 13th of July with AVG AntiVirus FREE and Windows 10.
Threat is Trojan Patched4_c.CHQT, SppExtComObjHook.dll, process svchost.exe

Removed it each time, but returns after restart. Tried some third party tools too (anti adware scans etc.) no results.
George GoldsmithGeorge Goldsmith
I also have the same problem. I have tried restoring to a previous restore point but the trojan still appears. I am currently using the free version of avg. 
 
Leonardo ZengLeonardo Zeng
I get the exact samething everytime I restart my computer too and I click protect me but it comes back after restarting. I have also sent in my diagnostic information too. I am using the free avg
AvinashAvinash (Avast) 
Leonardo,
If you have uploaded the diagnostic information, our senior technical team will get back to you via email with a resolution. Please be patient and keep checking your email. Thank you.
Eliseo NiñoEliseo Niño
AVG detected A trojan called "Troyano Patched4_c.CHQT" in my computer; AVG says the problem is solved , but each time I enter Windows 10 I receive the infection alert again and again. I have been using AVG Internet Security Pro for about 10 years; never before 
I have had this kind of problem I am surprised and worried this time
AvinashAvinash (Avast) 
Hello Elisio,
We regret for the inconvenience caused. Please run the AVG sysinfo tool and submit the output to us to analyze it and help you further.
Zyhn yoZyhn yo
Exact same problem everyone... I currently run Windows 10 and after the update I have done this is showing up, I am scared but Im happy Im not just the only one, I have no clue what to think about that. I have never had any problems except for this one problem and this one seems to be recent too. (so after the win10 update.)
Darwin AcevedoDarwin Acevedo
I just sent the info. I've seen that the virus doesn't affect connection or operativity, but is annoying to see the virus message every Windows start. Thanks for the help you could make for us.
D SD S
I have Windows 10, got the same thing- posted 2 times that I quarantined.
My computer is running very slow now.
Neil MerrickNeil Merrick
I have the same problem.
George GoldsmithGeorge Goldsmith
Where do I send the sysinfo output to?
 
Will NWill N
Any updates to this situtation? my AVG anti-virus also started detecting this a few days ago after I turned off my computer with the "update and shutdown" option. There doesn't seem to be too many people reporting this issue, but the ones that do all have the common story of updating and the next time they booted up it was detected by AVG. Hopefully our computers are not compromised.

I've tried switching off AVG and trying two other anti virus programs and they aren't picking anything up. Hopefully this is just a false positive in AVG's database otherwise I might reformat :(.

Closely monitoring this thread for replies from AVG representatives. Please let us know!
Gordon MGordon M
I also started to see this exact trojan Patched4_c.CHQT detected by AVG every time I restart Windows 10. AVG lets me protect and clean it out, but it reappears on every Windows restart.

I've tried running AVG in safe mode (it detected and cleaned out high severity detections, but didn't fix the prompts on every restart), and even tried uninstalling AVG to try running Windows Defender and Avast (neither of which seem to detect Patched4_c.CHQT).

This started showing up over the past couple days, as far as I recall. Any ideas on what to do? I'd much prefer not to reformat Windows as the nuclear option, but it's risky to leave this as-is if this trojan is real.


 
Alan BinchAlan Binch
@ Zyhn yo / D S / Neil Merrick / George Goldsmith / Will N / Gordon M
Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
GAry HeGAry He
Hello,  am running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next? Hate to rebuild system this take over 6 plus hours. 

Thank you Gary.
Shane BrennanShane Brennan
Been having the same problem myself over the last few days. 
Alan BinchAlan Binch
@ GAry He / Shane Brennan
Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
Andy MechmetAndy Mechmet
After running rkill, malwarebytes AM, adwcleaner, junkware removal tool, and hitman pro, AVG would still pick up that SppExtComObjHook.dll was a threat every time I started my computer. This file is in C:\Windows\Temp on my PC, so as soon as I start up I go to that folder and can watch that file pop up after a few seconds and then AVG notifies me of it's presence. So I tried something simple and so far it's working...

Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a  file as "SppExtComObjHook.dll".

After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
Tony GrochTony Groch
Same problem.  Windows 10, free AVG. started July 12 or 13.   SppExtComObjHook.dll every time I start my computer, the file is in C:\Windows\Temp.   Concerned and waiting for an answer from AVG. 
Alan BinchAlan Binch
@ Tony Groch
Tony, Follow the content of the Avinash (AVG Technologies) posting & please provide the info.. required.
AVG Guru
Tony GrochTony Groch
P.S.  I forgot to add that I have tried 3 times to use the SysInfo tool to upload my information, but it seems to hang after a pop-up goes through various file locations.  It gets approximately 20% done on the progress bar and then never moves any further.  I shut it down after 20 minutes of waiting.
George GoldsmithGeorge Goldsmith
I also have tried using the SysInfo tool, and after TWO whole hours of waiting, sent the output back and never heard back from anyone at AVG....very annoying.
David WilkinsonDavid Wilkinson
Also experiencing problem with Trojan Horse Patched4_c.CHQT, detected by AVG Free on system running Windows 10. File opened in Windows Temp as SppExtComObjHook.dll. Unclear how to access SysInfo tool and would be grateful for advice.
Mhaxx MhaxxMhaxx Mhaxx
The same problem after 15 July: have I to consider it as a fake virus that only AVG detects? or a malicious Windows update? Can someone of AVG team tell us what to do ASAP please?
Richard HoldRichard Hold
after i read all those comments, if the .dll belong to svchost.exe, maybe it's a false positive ?

Because svchost.exe seems to be a windows process (so no danger from that), so this dll is maybe not dangerous 

@AVGteam, what do you think about that ? thank you
Mhaxx MhaxxMhaxx Mhaxx
I performed a lot of test yesterday..

I restored the image of my notebook of 6 months ago and AVG found the virus (SppExtComObjHook.dll).

IMHO it's a little bit difficult I had this virus so long time ago, anyway..

This is what I did:
- restored the image of 6 months ago
- performed AVG scan (without connecting the computer to Internet, without AVG updates) => no virus found
- restarted computer
- performed AVG scan => no virus found
- connected the computer to Internet (without many programs like Dropbox, Skype, Chrome, etc) so that only AVG should be updated
- performed AVG scan => no virus found
- restarted computer
- performed AVG scan => virus (SppExtComObjHook.dll) found!!

My real suspect is that the recent version of AVG detects virus where 6 months it didn't detect it! Isn't it a *fake* detection?

Hey, AVG Team: could you kindly reply ASAP?
Mhaxx MhaxxMhaxx Mhaxx
Andy Mechmet, about your trick ("Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a  file as "SppExtComObjHook.dll") I can't create it where AVG detected/removed the file because of missing authorization.. (even if I perform it from command shell lauched as admin)

Any idea?
Richard HoldRichard Hold
Mhaxx Mhaxx : got the same problem even if i change the rights.
just change the name of another file here
Mhaxx MhaxxMhaxx Mhaxx
Hey, do you think AVG Team read this thread and verify if the issue is caused by its antivirus?
AravindhAravindh (Avast) 
Hello Brian,
We regret for the inconvenience caused. We would like to inform you that the issue which you are currently experiencing is fixed from our side. We request you to update your AVG program. Once the AVG program is updated successfully,try to restart your system and check it once with your application.. The following article explains how to update the http://support.avg.com/SupportArticleView?urlname=How-to-update-AVG your AVG Program. If the issue persists, please let us know by upcoming post we are here to help you.
Thank you.
Brian MootyBrian Mooty
After seeing your post I just now updated AVG and restarted my PC and the problem is still not fixed. It's still showing a threat detected from the same process name c:\Windows\System32\svchost.ext

But now the type of threat has changed to Tool_c.DV

It has the same object name and process name but a different threat type. So it seems that the AVG software doesn't know what the problem is or how to deal with it. It's no coincidence that the problem started occuring immediately after a Windows update. I'm almost %100 certain that the problem is not a virus but instead a glitch or false detection with the AVG software.

After my original post I did download the SysInfo tool and sent in my diagnostic information. They recently contacted me and offered to remote connect to my computer in order to try and solve the problem. I haven't had time to do that yet but I guess I should give them credit for offering. Although I'm kind of leery of letting someone remote connect to my computer. I still feel like this is just a false detection issue with the AVG software and hopefully they will get it sorted out.
Balasubramanian SBalasubramanian S (Avast) 
Hello Brian,

Sorry for the inconvenience caused.
We request you to go ahead in getting the remote support help of our level two technical team so that they can analyze the issue and fix it.
Through our remote support we can securely access your computer and perform the necessary tasks to fix the issue.
You can see our live session and chat with the customer service representative.
If you feel your privacy is being compromised, please feel free to revoke the remote desktop permission at any point of time by just clicking "X" mark in the right top corner of the chat window.
Mhaxx MhaxxMhaxx Mhaxx
I've just updated AVG and restarted my notebook, however at Windows startup AVG still alerts about virus..

The suspected file is always the same (c:\Windows\Temp\SppExtComObjHook.dll) but the virus isn't Patched4_c.CHQT: this time is Tool_c (http://www.avgthreatlabs.com/ww-en/virus-and-malware-information/pu/free/?utm_source=TDPU&utm_medium=RS&CTRY=it&LNG=us&PRTYPE=AVF&V=2016&AI=0&BE=21198618&IDNT=QEVJRF9JZF9wZ218JW5hbWUlPVRvb2xfYy5EVg&IDN=YzpcV2luZG93c1xUZW1wXFNwcEV4dENvbU9iakhvb2suZGxs).

The previous seemed to be a very dangerous one, while this should be a simple "potential unwanted application" which AVG lets me decide to remove or not!

Well.. AVG Team, please tell us:

1) have you fixed your software to avoid that kind of false positive?

2) why are you still detecting a form of virus (Tool_c), even if more inoffensive?

For your information I erased my computer a lot of time because of your detection! Fortunately I have an old image of my notebook, but certainly I'm not so happy still fighting after 1 week..
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Mhaxx,
We are sorry to know that the issue persists. Could you please provide a screen-shot (http://avgread.me/1aZxsAV) of the AVG alert pop-up for better assistance. Thank you.
Alan BinchAlan Binch
Mhaxx, For your info, just in case that you are unaware, you can post the screenshot here in your topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions. 
AVG Guru 
Wayne DaviesWayne Davies
AVG needs to have a anti-virus program, that comes on and runs through the complete regester program ( all files that boot up on a computer, when a computer is first turned on). The AVG program should be able to shut down the computer after updating all anti-virus downloads, and reboot the computer on it's won, and run through each and every file programmed within a computer as it is booting up, not run after the computer has booted up, and running. The regester files are skipped, and not checked, therefore AVG misses many pieces of hidden malware viruses within the boot-up rejester programming. I used a "Fix-Me Stick" to both find and get rid of, hidden malware within the regester programming used when booting up my computer. Had this stick not run through the regester section used during boot-up, I would not have got rid of them completely. AVG programming missed them completely, and failed to either find, or remove them off my computer. The regester section should never be skipped, when looking for viruses, as this is mainly where they are installed, and are hidden. A good anti-virus program goes through a complete computer's programming, from first startup, to shut-down programming, and all between those two points. If it doesn't, it fails in doing the job one pays for to keep their computer running properly at all times. AVG programming should be more like the "Fix-Me-Stick". It begins with updating it's anti-virus files, then shuts down your computer, and reboots it on it's own, and starts checking for viruses right from the very beginning of the boot up programming, and continues searching for viruses till it has gone through every one of your computers programs (start to finish) Once it has gone through all your prgramms, it reboots back using Wins. programming. While "Fix-Me-Stick" is running, it uses its very own personal programming throughout the virus searching process, not Wins. programming. This way, all viruses are caught and removed in the Wins. programming, before you begin booting up using Wins. OS. This way, when you begin using Wins OS, you know for sure all virus have been removed, while operating your computer. Think about this AVG, and design a program like "Fix-Me Stick". Your users depend on you, to keep their computers free of viruses at all times.
Mhaxx MhaxxMhaxx Mhaxx
http://www.avgthreatlabs.com/ww-en/virus-and-malware-information/pu/free/?utm_source=TDPU&utm_medium=RS&CTRY=it&LNG=us&PRTYPE=AVF&V=2016&AI=0&BE=21198618&IDNT=QEVJRF9JZF9wZ218JW5hbWUlPVRvb2xfYy5EVg&IDN=YzpcV2luZG93c1xUZW1wXFNwcEV4dENvbU9iakhvb2suZGxs

Here's the alert:

User-added image
Balasubramanian SBalasubramanian S (Avast) 
Hello Mhaxx,

We are sorry to know that you are still facing the issue.
Thank you for providing the screenshot.
In this case, we have sent you the email instructions to get our level two technical support help.
Please check for the email on spam or junk folders if it is not present in the inbox.
Ivaylo PetrovIvaylo Petrov
Hello,

I have exactly the same issue like Mhaxx Mhaxx. Could you please provide me instructions how to get rid of this crap on my laptop?

Thanks. 
Balasubramanian SBalasubramanian S (Avast) 
Hello Ivaylo,

Sorry to know that you are facing the same issue as others.
Do you have the AVG free, trial or paid version installed?
Also mention whether you have installed the latest 2016 version of AVG free antivirus?
AravindhAravindh (Avast) 
Hello Mhaxx,
We regret for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated. Thank you.
Mariano BoninaMariano Bonina
I have the same problem, when I restart my pc it find again.

I´m running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next?
David ZlámalDavid Zlámal
I have the same issue as everyone else and cannot use the trick to pu the fake file to the folder since even if I grant myself permission exactly as in tutorials, the system does not let mu put the file there. Please help!
Mhaxx MhaxxMhaxx Mhaxx
I've updated again AVG (today) as suggested by AVG team via mail, but the virus is still detected at Windows startup!

AVG Team: my computer is blocked from more than 15 days about this suspected false positive! Could you kindly fix it ASAP??
Mhaxx MhaxxMhaxx Mhaxx
I don't know how but I could rename c:\Windows\Temp\SppExtComObjHook.dll into a different file, move it away and create an empty one in place of the original one.

Now AVG doesn't detect virus anymore: am I safe??
Euan McMillanEuan McMillan
I also have this issue and have followed all the suggestions above. Looking forward to a solution, after much effort and using many different maleware and antivirus softwares, the only one reporting an issue is AVG. 
Thanks in advance. 
PS I am using Windows 10 and AVG free version
KarthikeyanKarthikeyan (Foundever) 
Hello Euan,
We apologize for the inconvenience.
We are working on a fix for this issue. Please stay connected to know further update for the fix.
Thank you.
Dan RobinsonDan Robinson
I also have the exact same issue as everyone else here.  I am running the free version of AVG, completely up-to-date.  Please help.  Tried the fake temp file; did not work.
KarthikeyanKarthikeyan (Foundever) 
Hello Dan,
We apologize for the inconvenience.
We are working on a fix for this issue. Please stay connected to know further update for the fix.
Thank you.
Paweł FragliPaweł Fragli
If you have a problem with creating a file in the TEMP directory
rename the directory c:\Windows\temp on the c:\Windows\temp1
create a file SppExtComObjHook.dll
rename the directory c:\Windows\temp1 on the c:\windows\temp
Mhaxx MhaxxMhaxx Mhaxx
AVG Team, I've sent the (suspected) infected file named SppExtComObjHook.dll via email: any news??

We all need to know if THIS IS OR NOT a virus!
Balasubramanian SBalasubramanian S (Avast) 
Hello Mhaxx,

Did you submit the threat detected sample to us using this link: http://www.avg.com/submit-sample ?
Do you use a free, trial or paid version of AVG Antivirus program?
Mhaxx MhaxxMhaxx Mhaxx
Download it from http://www.filedropper.com/sppextcomobjhook and rename it to SppExtComObjHook.dll as the original one.

I've already sent the collected info in my system some days ago from my email.
AravindhAravindh (Avast) 
Hello Mhaxx,
Thank you for providing the information. We can see that your case has been escalated to our senior technical team and we are hardly working to resolve the issue. Once we get the optimal resolution we will contact you through your registered email address. Your patience is much appreciated. Thank you.
Mhaxx MhaxxMhaxx Mhaxx
We all are waiting for a fix from more than 15 days!
AravindhAravindh (Avast) 
Hello Mhaxx,
We can really understand your concern. Pleased be patience and our developers are really working hard to resolve the issue. Once we analyze the root cause of the issue we will find the complete resolution to fix it.Your patience is much appreciated. Thank you.
Dan RobinsonDan Robinson
Hi, This is getting worse.  My system is now hanging upon each reboot.  Had to disconnect my wireless mouse..?
KarthikeyanKarthikeyan (Foundever) 
Hello Dan,
We apologize for the inconvenience.
Could you please let us know if you are having this issue in PC or laptop?
Thank you.
Euan McMillanEuan McMillan
Sorry to say, I uninstalled AVG and installed AVIRA; - the issue has gone away. Thanks you.
KishoreKishore (Avast) 
Hello Euan,
We apologize if an AVG product did not meet your expectations. Our main goal is to keep our customers happy.

AVG carefully monitors the quality of our products and the service we provide, therefore all feedback from our customers is important to us. If you have a specific experience with AVG products that you would like to share with us here http://avgclick.me/AVGfeedback , we would appreciate hearing about it.
Mhaxx MhaxxMhaxx Mhaxx
I'm really evaluating to substituite AVG with another antivirus on all the machines I manage, because of the missing fix from > 20 days.
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Mhaxx,
We are sorry for the delay caused. Could you please confirm to us if you have already submitted the form https://secure.avg.com/submit-sample ?If so , when did you 'submit' the form? Thank you.
Antal BasaAntal Basa
Same problem here since 3 weeks. Every time, when i start the Pc, the AVG (AVG Internet Security 16.91.7690) found a "potentoinal unwanted application: Tool_c.dv".

C:\Windows\Temp\DppExtComObjHook.dll

When i click to "Protect me", the avg "kills" the "virus". But on the next startup, the all proceed starts again. Every startups...
Aravind GnanamurthyAravind Gnanamurthy (Avast)
Hello Antal,
We apologize for the inconvenience caused.
Could you please let me know the name of the AVG product you have installed in your pc? also provide us the screenshot http://avgclick.me/getscreenshot of the issue you are facing? so that we can assist you better in fixing it.
Feel free to contact us for any further assistance. Thank you.
Mhaxx MhaxxMhaxx Mhaxx
AVG Team, please read some post before:

Download it from http://www.filedropper.com/sppextcomobjhook and rename it to SppExtComObjHook.dll as the original one.

I've already sent the collected info in my system some days ago from my email
Aravind GnanamurthyAravind Gnanamurthy (Avast)
Hello Mhaxx,
We apologize for the inconvenience caused. We can see that your case has been escalated to senior most technicians. Please be patience until we find the root cause of the issue. Once we find it, we will reply through your registered email address and help you to resolve your issue earliest. Your patience is much appreciated.
Thank you.
Alan BinchAlan Binch
@ Antal Basa
Antal, Also for your info, just in case that you are unaware, you can post the screenshot here in the topic. Click on 'Answer' & then click on the 'Image' [mountain symbol] & follow the instructions. 
AVG Guru
Antal BasaAntal Basa
Thanx for Ur answer! :)

The detection is the same like Mhaxx, posted on 23th. july:

User-added image
When i choose to "Protect Me"... let the screenshot talk:
User-added image
So now, its deleted, problem solved... (?)
User-added image
But on the next startup, everything starts again...
 
Antal BasaAntal Basa
Just like Mhaxx...

User-added image
Euan McMillanEuan McMillan
Thanks Kishore (AVG Technologies), I like AVG and its always done a great job for me, sorry to tell you I fixed the problem with a competitor product, its a valid troubleshooting step!!! ;-) My wife and family still use AVG and they don't have this problem, so I at first tried to fix the issue, result is my computer has had a good tune up, very clean and fast to restart now!
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello all,
From the screen-shot we could understand that Tool_c.DV detection is PUP related to the KMS aplications which are used for illegal activation of Microsoft products. We recommend either uninstalling the application or disable PUP scans in AVG .Thank you.
Mhaxx MhaxxMhaxx Mhaxx
Euan McMillan, what do you mean exactly?

Has another antivirus removed the virus or simply not detected the virus that AVG detects?
Manuel BradManuel Brad
Hi,

Had the same issues. Delete autoKMS folder probably in c:\windows\autokms  and will be resolved.
The file is created by kmsspico or autokms or similar and is created in win/temp at each start of pc where it checks if needed to activate office.....
 
Balasubramanian SBalasubramanian S (Avast) 
Hello Manuel,

Thank you for sharing the workaround.
We really appreciate your efforts.
Mhaxx MhaxxMhaxx Mhaxx
AVG Team: your antivirus is the only one that consider it as virus (take a look at https://m.reddit.com/r/techsupport/comments/4swn5q/can_i_save_my_computer_without_having_to/)

What does it mean, is it a fake?
Mhaxx MhaxxMhaxx Mhaxx
I also have AutoKMS.. is that the cause?

AVG Team: in this case is c:\Windows\Temp\SppExtComObjHook.dll really a dangerous virus or not?
Balasubramanian SBalasubramanian S (Avast) 
Hello Mhaxx,
Sorry, we couldn't access any other links due to our company's security policy.
Do you have any other third party antivirus program installed along with AVG?
Mhaxx MhaxxMhaxx Mhaxx
No, only AVG
AravindhAravindh (Avast) 
Hello Mhaxx,
As we said earlier that Tool_c.DV detection is PUP related to the KMS applications which are used for illegal activation of Microsoft products. We have  suggested in the earlier post either to disable or uninstall the application since you have already disable the application and it didn't work we request you to uninstall the application and try to Scan through AVG. If the issue is still persist please let us know we are here to help you. Thank you.
Mhaxx MhaxxMhaxx Mhaxx
I think that AVG has to say if that program is or not a virus, since PUP only means "potentially" unwanted program.. about the program it's a long story and I can't remove it
KarthikeyanKarthikeyan (Foundever) 
Hello Brian,
We do understand your concern, if you suspect this program is a genuine one and it is a false detection from AVG, you can send the application to AVG whitelist service http://support.avg.com/SupportArticleView?urlname=What-is-AVG-Whitelisting-service and also you can add the exception of the program from AVG scan. Use this link for the steps to add the program to AVG exception list http://avgclick.me/AddException
Thank you.
Mhaxx MhaxxMhaxx Mhaxx
I don't know if it's a false detection from AVG, I hope you can tell me, ASAP.

I'm trying to send it to you again via email but I can't get it since AVG goes on alerting me when I try to select or zip..
Rajarajan SooiyachanthRajarajan Sooiyachanth (Avast)
Hello Mhaxx,
We regret for the inconvenience caused. We suggest you to make sure if you are using a latest version(2016) of AVG and then repair your AVG (avgclick.me/RepairAVG). If the issue persists, we suggest you to temporarily disable your AVG program (http://avgclick.me/TempDisableAVG) in order to avoid the pop-up and then fill the form https://secure.avg.com/submit-sample .Thank you.
Mhaxx MhaxxMhaxx Mhaxx
AVG Team, I've just sent SppExtComObjHook.dll via email as requested by you.

I hope this time you can analyze it and say if it's a false positive or a real dangerous program.

We know it's origin (AutoKMS) but we want to know if you'll degrade to genuine file or not, that is if we could exclude it from AVG, because of AVG is the only antivirus which detects it.

Looking forward to hearing from you ASAP!
 
AravindhAravindh (Avast) 
Hello Mhaxx,
Thank you for reaching out to us with your concerns. We can see that you have been submitted your samples to our developers and case has been escalated already with high priority. We are really working on it to fix the issue. Once we find the optimal resolution we will get back through your email. Your patience is much appreciated. Thank you.
a Lacia Laci
MS:

Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a  file as "SppExtComObjHook.dll".

After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.
KishoreKishore (Avast) 
Hello Lasi,


You can find answer to your question together with your another post. Please try keep whole conversation in one question/thread to speed up resolution.

Thank you.
Alan BinchAlan Binch
User a Laci has posted their own topic (https://support.avg.com/answers?id=906b0000000DNfbAAG).
a Laci, In future please refrain from carrying out multiple postings on the same subject! You won't obtain an answer to your query any faster!. 
AVG Guru
Jan SchrikJan Schrik
@Alan Binch
Not much of a solution to the original problem. Mentioning cross-posting is also off -topic
Alan BinchAlan Binch
@ Jan Schrik
Jan, If you look again @ the other user a Laci posting you'll see that advice was actually provided by Kishore (AVG Technologies) to the user regarding the issue.
AVG Guru
Paul SmithPaul Smith
Solved my problem with this by disabling potentiall unwanted applications in advanced settings but putting a notepad file in the temp folder given called sppextcomobjhook.dll also works

yes I am using KMS before you ask

hope this helps
Balasubramanian SBalasubramanian S (Avast) 
Hello Paul,

Are you sure that the threat detected isn't a harmful one for your PC?
Paul SmithPaul Smith
Yes I am certain its a fals positive...
KarthikeyanKarthikeyan (Foundever) 
Thank you for the information, Brian. In this case, we suggest you to add this program to AVG exception list http://avgclick.me/AddException. And also send a sample of this file to AVG, so that we can check this and add this to AVG whitelist server https://secure.avg.com/submit-sample.
Thank you
Ask a question
Struggling with non-AVG technology? We can fix that, too!