Jump to content
Poltargot91

SppExtComObjPatcher.exe

Recommended Posts

Whenever I boot up my PC, I always see Malwarebytes blocking a program called "SppExtComObjPatcher.exe". Once it was quarantined and deleted, it keeps on coming back.

My PC does NOT encounter any performance difficulties or has any other extension that seems fishy for my browser. However, Malwarebytes keeps on detecting this program and I don't know what should I do about it.

picture1.png.6b88ff0c91012e88c7efd06491b3d406.png

When I delete the quarantined programs and perform a Threat Scan with Malwarebytes, it doesn't find anything.

picture2.png.58ed8463689912c8d95e903b1b9889ac.png

When I delete the quarantined programs and scan with AdwCleaner 7.2.3, it also doesn't find anything.2023494914_picture3.png.a0d9a8db69f1d1002021bda5e597a7c8.png

Any help?

Share this post


Link to post
Share on other sites
Hello Poltargot91 and welcome to Malwarebytes,

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
    user posted image
     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Thank you,

Kevin...

 

Share this post


Link to post
Share on other sites

Update: Malwarebytes finaly deleted SppExtComObjPatcher.exe by detecting it and putting it in Quarantine serval times.

I haven't seen it detect it anymore and I didn't find it in my Registry.
I haven't seen any other fishy extensions on Chrome. (aka It didn't hijack into my Chrome)
I haven't seen any other fishy files upon scanning my PC. (aka It didn't create any harmful programs on my PC)
My PC still has its' fast speed, like usual.
No problems when starting up or playing games.

Summary: Malwarebytes has gotten rid of an annoying rootkit-behaving malware.

close thread

Edited by Poltargot91

Share this post


Link to post
Share on other sites

Ok if you are sure the thread can be closed do the following to remove FRST and any created folders...

Right click on FRST here: C:\Users\hc\DownloadsFRST64.exe and rename to uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator"

If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall

That action will remove FRST and all created files and folders...

Next,

Remove all System Restore Points: https://www.tenforums.com/tutorials/33593-delete-system-restore-points-windows-10-a.html#option2

Create clean fresh Restore Point: http://www.thewindowsclub.com/create-system-restore-point

From there you should be good to go...
 
Regards,
 
Kevin...

Share this post


Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.