Trojan horse Patched4_c.CHQT

Also experiencing problem with Trojan Horse Patched4_c.CHQT, detected by AVG Free on system running Windows 10. File opened in Windows Temp as SppExtComObjHook.dll. Unclear how to access SysInfo tool and would be grateful for advice.

MS:

Let AVG delete the threat, but note where it says the file location is. Go to that folder, open notepad and save a  file as "SppExtComObjHook.dll".

After doing that, I restarted my PC and it seems like whatever was creating that file, was unable to do so because the fake one I saved was there instead. No more AVG popup, and hopefully no more whatever threat from SppExtComObjHook.dll.

@Alan Binch
Not much of a solution to the original problem. Mentioning cross-posting is also off -topic

Hello Mhaxx,
Thank you for providing the information. We can see that your case has been escalated to our senior technical team and we are hardly working to resolve the issue. Once we get the optimal resolution we will contact you through your registered email address. Your patience is much appreciated. Thank you.

Solved my problem with this by disabling potentiall unwanted applications in advanced settings but putting a notepad file in the temp folder given called sppextcomobjhook.dll also works

yes I am using KMS before you ask

hope this helps

Hello Brian,
We regret for the inconvenience caused. We would like to inform you that the issue which you are currently experiencing is fixed from our side. We request you to update your AVG program. Once the AVG program is updated successfully,try to restart your system and check it once with your application… The following article explains how to update the http://support.avg.com/SupportArticleView?urlname=How-to-update-AVG your AVG Program. If the issue persists, please let us know by upcoming post we are here to help you.
Thank you.

AVG needs to have a anti-virus program, that comes on and runs through the complete regester program ( all files that boot up on a computer, when a computer is first turned on). The AVG program should be able to shut down the computer after updating all anti-virus downloads, and reboot the computer on it's won, and run through each and every file programmed within a computer as it is booting up, not run after the computer has booted up, and running. The regester files are skipped, and not checked, therefore AVG misses many pieces of hidden malware viruses within the boot-up rejester programming. I used a "Fix-Me Stick" to both find and get rid of, hidden malware within the regester programming used when booting up my computer. Had this stick not run through the regester section used during boot-up, I would not have got rid of them completely. AVG programming missed them completely, and failed to either find, or remove them off my computer. The regester section should never be skipped, when looking for viruses, as this is mainly where they are installed, and are hidden. A good anti-virus program goes through a complete computer's programming, from first startup, to shut-down programming, and all between those two points. If it doesn't, it fails in doing the job one pays for to keep their computer running properly at all times. AVG programming should be more like the "Fix-Me-Stick". It begins with updating it's anti-virus files, then shuts down your computer, and reboots it on it's own, and starts checking for viruses right from the very beginning of the boot up programming, and continues searching for viruses till it has gone through every one of your computers programs (start to finish) Once it has gone through all your prgramms, it reboots back using Wins. programming. While "Fix-Me-Stick" is running, it uses its very own personal programming throughout the virus searching process, not Wins. programming. This way, all viruses are caught and removed in the Wins. programming, before you begin booting up using Wins. OS. This way, when you begin using Wins OS, you know for sure all virus have been removed, while operating your computer. Think about this AVG, and design a program like "Fix-Me Stick". Your users depend on you, to keep their computers free of viruses at all times.

Hello all,
From the screen-shot we could understand that Tool_c.DV detection is PUP related to the KMS aplications which are used for illegal activation of Microsoft products. We recommend either uninstalling the application or disable PUP scans in AVG .Thank you.

Hi,

Had the same issues. Delete autoKMS folder probably in c:\windows\autokms  and will be resolved.
The file is created by kmsspico or autokms or similar and is created in win/temp at each start of pc where it checks if needed to activate office…

Hello Mhaxx,
We regret for the inconvenience caused. We suggest you to make sure if you are using a latest version(2016) of AVG and then repair your AVG (avgclick.me/RepairAVG). If the issue persists, we suggest you to temporarily disable your AVG program (http://avgclick.me/TempDisableAVG) in order to avoid the pop-up and then fill the form https://secure.avg.com/submit-sample .Thank you.

@Alan Binch
Not much of a solution to the original problem. Mentioning cross-posting is also off -topic

Hello,  am running the free version of AVG, most current defs on a Windowas 10 pro 64 bit system. I too am haveing this issue with the Patched4_c.CHQT, SppExtComObjHook.dll after reboot. It cleans it but once I reboot it finds it again. I have look into ran regedt to see if I can find anything but nothing there. I have uninstall recent application, tool bar addons but not luck. What is next? Hate to rebuild system this take over 6 plus hours. 

Thank you Gary.

Hello Mhaxx,
We are sorry to know that the issue persists. Could you please provide a screen-shot (http://avgread.me/1aZxsAV) of the AVG alert pop-up for better assistance. Thank you.

After seeing your post I just now updated AVG and restarted my PC and the problem is still not fixed. It's still showing a threat detected from the same process name c:\Windows\System32\svchost.ext

But now the type of threat has changed to Tool_c.DV

It has the same object name and process name but a different threat type. So it seems that the AVG software doesn't know what the problem is or how to deal with it. It's no coincidence that the problem started occuring immediately after a Windows update. I'm almost %100 certain that the problem is not a virus but instead a glitch or false detection with the AVG software.

After my original post I did download the SysInfo tool and sent in my diagnostic information. They recently contacted me and offered to remote connect to my computer in order to try and solve the problem. I haven't had time to do that yet but I guess I should give them credit for offering. Although I'm kind of leery of letting someone remote connect to my computer. I still feel like this is just a false detection issue with the AVG software and hopefully they will get it sorted out.

I have the same issue as everyone else and cannot use the trick to pu the fake file to the folder since even if I grant myself permission exactly as in tutorials, the system does not let mu put the file there. Please help!

I also have the exact same issue as everyone else here.  I am running the free version of AVG, completely up-to-date.  Please help.  Tried the fake temp file; did not work.

Hi, This is getting worse.  My system is now hanging upon each reboot.  Had to disconnect my wireless mouse…?

Hello Euan,
We apologize if an AVG product did not meet your expectations. Our main goal is to keep our customers happy.

AVG carefully monitors the quality of our products and the service we provide, therefore all feedback from our customers is important to us. If you have a specific experience with AVG products that you would like to share with us here http://avgclick.me/AVGfeedback , we would appreciate hearing about it.

Just like Mhaxx…

User-added image

Hello Mhaxx,
We are sorry to know that the issue persists. Could you please provide a screen-shot (http://avgread.me/1aZxsAV) of the AVG alert pop-up for better assistance. Thank you.