Poltargot91 Posted September 7, 2018 ID:1268146 Share Posted September 7, 2018 Whenever I boot up my PC, I always see Malwarebytes blocking a program called "SppExtComObjPatcher.exe". Once it was quarantined and deleted, it keeps on coming back. My PC does NOT encounter any performance difficulties or has any other extension that seems fishy for my browser. However, Malwarebytes keeps on detecting this program and I don't know what should I do about it. When I delete the quarantined programs and perform a Threat Scan with Malwarebytes, it doesn't find anything. When I delete the quarantined programs and scan with AdwCleaner 7.2.3, it also doesn't find anything. Any help? Link to post Share on other sites More sharing options...
kevinf80 Posted September 7, 2018 ID:1268154 Share Posted September 7, 2018 Hello Poltargot91 and welcome to Malwarebytes, Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.htmlNote: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin... Link to post Share on other sites More sharing options...
Poltargot91 Posted September 7, 2018 Author ID:1268188 Share Posted September 7, 2018 Greetings Kevin. There are the files you have asked for. FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Poltargot91 Posted September 9, 2018 Author ID:1268473 Share Posted September 9, 2018 (edited) Update: Malwarebytes finaly deleted SppExtComObjPatcher.exe by detecting it and putting it in Quarantine serval times. I haven't seen it detect it anymore and I didn't find it in my Registry. I haven't seen any other fishy extensions on Chrome. (aka It didn't hijack into my Chrome) I haven't seen any other fishy files upon scanning my PC. (aka It didn't create any harmful programs on my PC) My PC still has its' fast speed, like usual. No problems when starting up or playing games. Summary: Malwarebytes has gotten rid of an annoying rootkit-behaving malware. close thread Edited September 9, 2018 by Poltargot91 Link to post Share on other sites More sharing options...
kevinf80 Posted September 9, 2018 ID:1268483 Share Posted September 9, 2018 Ok if you are sure the thread can be closed do the following to remove FRST and any created folders... Right click on FRST here: C:\Users\hc\DownloadsFRST64.exe and rename to uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator" If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall That action will remove FRST and all created files and folders... Next, Remove all System Restore Points: https://www.tenforums.com/tutorials/33593-delete-system-restore-points-windows-10-a.html#option2 Create clean fresh Restore Point: http://www.thewindowsclub.com/create-system-restore-point From there you should be good to go... Regards, Kevin... Link to post Share on other sites More sharing options...
kevinf80 Posted September 10, 2018 ID:1268699 Share Posted September 10, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 26, 2018 Root Admin ID:1271699 Share Posted September 26, 2018 Topic has been reopened per request. Thanks Link to post Share on other sites More sharing options...
kevinf80 Posted October 13, 2018 ID:1275266 Share Posted October 13, 2018 Hello Poltargot91, Do you require further assistance...? Thanks, Kevin... Link to post Share on other sites More sharing options...
kevinf80 Posted October 22, 2018 ID:1276960 Share Posted October 22, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts