Hello,
I am sorry, this is my day of questions !
In my task manager there is a process called "Promptservice.exe" described as "Pwd Promt Service".
I don't find any program related to this process in the installed program list. I don't know for what it stands and if this is malware?
How to delete it safely?
Thank you for your help
Last edited by sevener; 16 Jul 2011 at 15:58.
Hi,
That process has been known to be used by malware to gain access to systems - this may or may not be the case with your system.
Please run a FULL system scan using the FREE version of Malwarebytes.
Regards,
Golden
I add that this process is active under my user name but not as a system process! Does this mean it is virus or malware?
My antivirus (Microsoft Security Essential ) doesn't detect it!
Thank you Golden.
I found on a "pcsafedoctor" website the following note:
(Normally, the PromptService.exe file should be in the C:\Windows\System32 folder. If it is found anywhere else, then the PromptService.exe could be a virus, Trojan, worm, or spyware)!
I don't find it in the System32 folder but when searched it in the registry, it appears in Microsoft>Windows>CurrentVersion>Run>PromptService.exe! Strangely, it is active under the user name but not under the system processs!
Hi! sevener, welcome to 7F :)
No need to apologize, if you have posted all 46 questions today you have been busy indeed!
If you search for Promptservice.exe it does not look too friendly.
If you search for Pwd Promt Service it it comes back with mixed reviews.
One of our malware experts likes SystemLookup Promptservice.exe comes back with no results, but Pwd Promt Service does not look too friendly, and it also shows mixed reviews.
Do you have any third-party malware scanners you can use to check it with?
One good on-line scanner is at Eset.
Run Malwarebytes as suggested in the first response.
Thanks again for your answers.
Actually, I found it!
It seems to be a part of software called "Folder Protect" that I tried some months ago.
When I right-click > Propriety, I found the name of Newsoftware.net company! I searched it in google and found that Folder Proetct is their program that I installed/uninstalled some time ago.
Apparently, after uninstallation, it leaves this stubborn file!
The question now is how to delete it completely!
I am going to delete its key in the registry.
Thank you very much
You should be able to copy/paste either "Promptservice.exe" or "Pwd Promt Service" into Start >Search. I would search for both.
Then at the bottom you may see 'See more results' when that window opens click on 'Organize' in the menu bar.
Move down to 'Select All' you should see all the files listed highlite themselves in blue.
Go anywhere on them, and >Right click >Delete.
Any files that remain may need a more persistent form of deletion.
Thank you.
I also searched for both in the registry and deleted them.
Quote