View original (French)

SppExtComObj.Exe file detected by Defender

Batz1625 Posted messages 62 Status Member -  
Batz1625 Posted messages 62 Status Member -
Hello,
I just ran an analysis of my PC with Windows Defender, and I noticed that there were files named SppExtComObj.Exe that were detected, but they were listed in my exclusions for a reason I don't know.
Is it an overzealous reaction from my antivirus, or are these malicious files that I need to delete? If I need to delete them, can I do it through Windows Defender?
If this file is not malicious, what is its purpose? I wanted to delete it, but since I'm not very knowledgeable, I didn't want to risk it being an important component.
As a picture is worth a thousand words, here is a screenshot:

Thank you for helping me!

Configuration: Windows / Firefox 61.0

9 answers

Answer 1 / 9
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711
 
Hello,

These files are related to KMSpico.
Read: https://www.malekal.com/kmspico/
It is not legal to bypass licenses and the forum does not provide support for such programs (against the rules).

--
Please press any key to continue the disinfection...
0
Batz1625 Posted messages 62 Status Member
 
I don’t understand? I’m reading on the site you just sent me, but I don’t understand how I have bypassed the licenses?
0
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711 > Batz1625 Posted messages 62 Status Member
 
The answer is in the link.
You or someone used KMSPico to activate Windows without paying.
The latter works with paid licenses.
0
Answer 2 / 9
Batz1625 Posted messages 62 Status Member
 
I lent my computer to a friend this spring, who installed a pirated version of Windows 7 to put it on a USB drive, but you even helped me get rid of it. However, I am supposed to use a legal version of Windows 10, I don't quite understand.
0
Answer 3 / 9
Batz1625 Posted messages 62 Status Member
 
Honestly, I don't think I've done anything illegal, other than lending my computer to a malicious individual I trusted. It's a shame I can't get help because of that :(
0
Answer 4 / 9
Batz1625 Posted messages 62 Status Member
 
but I don’t really understand why they refuse to help me? I haven’t done anything wrong?
0
Answer 5 / 9
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711
 
If this computer was sold with Windows 7, the key would need to be provided and KMSpico uninstalled.

--
Please press any key to continue the cleanup...
0
Answer 6 / 9
Batz1625 Posted messages 62 Status Member
 
In fact, I bought this computer with Windows 10 Pro, but as mentioned earlier, someone who was more or less "well-intentioned" downloaded a pirated version of Windows 7 on my computer to create a USB key. I had issues of this kind with a file named gendows that you just helped me get rid of.
0
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711
 
So, reinstall Windows 10 or buy a Windows 7 license.
0
CreepXI Posted messages 145 Status Member 7
 
Hi,

If I understand correctly, your computer is running Windows 10 but a friend of yours used your computer to create a USB stick under Windows 7? So your problem is not going back to Windows 7 but removing the SppExtCombObj.exe?

Thank you :)

--
0
Batz1625 Posted messages 62 Status Member > CreepXI Posted messages 145 Status Member
 
Right on!
0
CreepXI Posted messages 145 Status Member 7
 
Hello,

So, I suggest you follow this tutorial (from Malekal_morte-), however I am not a computer expert, even though I am interested in it I might not be of much help...

To check the computer, I invite you to perform this FRST analysis and send back the reports:

Follow the FRST tutorial. (take the time to read carefully, everything is well explained)

https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/

Three FRST reports will be generated:
FRST.txt
Shortcut.txt
Additionnal.txt


Send these 3 reports to the site https://pjjoint.malekal.com/ to share them.
In return, provide the 3 pjjoint links that lead to the reports here in a new reply so we can review them.

Thank you :)

--
0
Batz1625 Posted messages 62 Status Member
 
Someone on Tom's guide advised me to do the same thing, but the site to generate the links was this one, https://security-x.fr/up/, he only had two links to send and this screenshot.
https://up.security-x.fr/file.php?h=R8be242b180f490c804aa81836644709c
https://up.security-x.fr/file.php?h=Rce22e9bef9fae11cc0adfdf905de3510

Thank you!
0
Answer 7 / 9
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711
 
Why create multiple threads on forums, I don't see the point.
Otherwise, FRST is not useful.
You clearly have a KMSPico license....
See my explanations.

Otherwise, Web Companion is a potentially unwanted program, to uninstall.
CCleaner is not really useful, even though it’s recommended everywhere.
If you want to keep it, disable CCleaner’s monitoring, which is unnecessary; it starts up with Windows and slows it down with its constant cleanups, see: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/

0
Batz1625 Posted messages 62 Status Member
 
To optimize my chances of getting a response!
Why is FRST not useful?
0
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711 > Batz1625 Posted messages 62 Status Member
 
You are holding two people from two different forums for a simple problem.
For FRST, because it is not a malware issue.
0
Batz1625 Posted messages 62 Status Member
 
Am I taking up that much of your time?
0
Batz1625 Posted messages 62 Status Member
 
My goal was not to be disingenuous. I just need help to resolve an issue.
0
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711 > Batz1625 Posted messages 62 Status Member
 
I wanted to say that we could use it to help others.
In short, you need to uninstall KMSpico and re-enter the Windows 10 Pro key that you purchased.
0
Answer 8 / 9
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 711
 
well no otherwise I would have told you to restore it =)
In 130 days Windows will no longer be activated, you will be able to use it but not some functions like changing the wallpaper, some other settings, etc.

I summarized what to do here: https://www.malekal.com/supprimer-kmspico/
No need to uninstall since you don't have it.
Remove the exceptions, delete everything, use the zip
And enter your Windows 10 Pro key as indicated.

--
Please press any key to continue the disinfection...
0
Batz1625 Posted messages 62 Status Member
 
Does reinstalling the license mean formatting the computer?
0
Batz1625 Posted messages 62 Status Member
 
For example, should I find all my drivers and everything?
0
Batz1625 Posted messages 62 Status Member
 
And also, in the links I just consulted (the pages you sent me), it is stated that for Windows 10, it is not necessary to use a key?
0
Batz1625 Posted messages 62 Status Member
 
I just copied and pasted the command line provided in the link you sent me into the cmd, but it doesn't work!
0
Batz1625 Posted messages 62 Status Member
 
To find the Windows key, I used this method.
https://www.pcastuces.com/pratique/astuces/4279.htm
Is that okay?
0
Answer 9 / 9
Batz1625 Posted messages 62 Status Member
 
How can I restore my legal Windows license that I purchased? And I was so sure I had uninstalled Web Companion!
0