Solved What is "PromtService.exe"

sevener

New member
Local time
4:05 AM
Messages
136
What is "PromptService.exe"

Hello,

I am sorry, this is my day of questions !:o

In my task manager there is a process called "Promptservice.exe" described as "Pwd Promt Service".

I don't find any program related to this process in the installed program list. I don't know for what it stands and if this is malware?
How to delete it safely?

Thank you for your help
 
Last edited:

My Computer My Computer

OS
Windows 7
Hi,

That process has been known to be used by malware to gain access to systems - this may or may not be the case with your system.

Please run a FULL system scan using the FREE version of Malwarebytes.

Regards,
Golden
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
I add that this process is active under my user name but not as a system process! Does this mean it is virus or malware?
My antivirus (Microsoft Security Essential ) doesn't detect it!
 

My Computer My Computer

OS
Windows 7
Hi,

That process has been known to be used by malware to gain access to systems - this may or may not be the case with your system.

Please run a FULL system scan using the FREE version of Malwarebytes.

Regards,
Golden

Thank you Golden.

I found on a "pcsafedoctor" website the following note:
(Normally, the PromptService.exe file should be in the C:\Windows\System32 folder. If it is found anywhere else, then the PromptService.exe could be a virus, Trojan, worm, or spyware)!

I don't find it in the System32 folder but when searched it in the registry, it appears in Microsoft>Windows>CurrentVersion>Run>PromptService.exe! Strangely, it is active under the user name but not under the system processs!
 

My Computer My Computer

OS
Windows 7
Hi! sevener, welcome to 7F :)

No need to apologize, if you have posted all 46 questions today you have been busy indeed! :shock:

If you search for Promptservice.exe it does not look too friendly.
If you search for Pwd Promt Service it it comes back with mixed reviews.

One of our malware experts likes SystemLookup Promptservice.exe comes back with no results, but Pwd Promt Service does not look too friendly, and it also shows mixed reviews.


Do you have any third-party malware scanners you can use to check it with?

One good on-line scanner is at Eset.
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Gateway DX4831-01e (Mid-Tower Desktop)
OS
Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
CPU
Intel i3 530 2.93GHz, 2933MHz 2 Cores 4 Logical Processors
Motherboard
Gateway H57M01 133 megahertz
Memory
6GB of 1,333MHz DDR3 SDRAM
Graphics Card(s)
32MB Intel Graphics Media Accelerator HD IGChip
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Gateway HX2000 20inch TFT active matrix TN
Screen Resolution
1600 x 900 x 59 hertz
Hard Drives
WDC WD10EADS-00M2B0 [HDD] (1000.20 GB) -- drive 0,
HL-DT-ST DVDRAM GH41N [CD-ROM dr]
Four card readers, and Four USB 2.0
PSU
300watts.
Case
Mid-Tower Desktop
Cooling
Stock from Gateway
Keyboard
Natural Ergonomic Keyboard 4000, see Other Info
Mouse
Orig. Gateway wore out now using Insignia USB wired optical
Internet Speed
Vz FIOS 10ms png 57.64Mbps down 65.53Mbps up Speedtest.org
Antivirus
Zamana Anti-logger with Anti-malware, MSE, Windows Firewall,
Browser
IE11.0.9600.19399-Upd ver11.0.135, Firefox 68.0.1 x64
Other Info
System Specs by Belarc.

BIOS: American Megatrends Inc. P01-A0 11/17/2009

Replaced the MS 'Natural' Standard PS/2 Enhanced 101-102 Keyboard with a new Natural Ergonomic Keyboard 4000 on August 1st 2014.

Canon Pixma MG3222 Printer.

Updated to IE11 on 12102015 | Fios Quantum Router g1100

Additional AV: SpywareBlaster, manual Mbam, SAS
Run Malwarebytes as suggested in the first response.
 

My Computer My Computer

Computer Manufacturer/Model Number
Custom
OS
Windows 7 Ultimate RTM (Technet)
CPU
3.00 gigahertz Intel Core2 Duo E8400
Motherboard
ASUSTeK Computer INC. P5K/EPU Rev 1.xx
Memory
4GB
Graphics Card(s)
ATI Radeon X1950 Pro
Sound Card
Built in HD Audio
Monitor(s) Displays
22" Gateway LCD
Screen Resolution
1920 x 1200
Hard Drives
ST3160023A [Hard drive] (160.04 GB) -- drive 0, rev 8.01, ST3500630AS [Hard drive] (500.11 GB) -- drive 2, rev 3.AAK
ST3500630AS [Hard drive] (500.11 GB) -- drive 1, rev 3.AAK
Keyboard
Logitech G11
Mouse
Microsoft Wireless Laser Mouse 5000
Internet Speed
13.44 Mbps
Thanks again for your answers.
Actually, I found it!
It seems to be a part of software called "Folder Protect" that I tried some months ago.
When I right-click > Propriety, I found the name of Newsoftware.net company! I searched it in google and found that Folder Proetct is their program that I installed/uninstalled some time ago.
Apparently, after uninstallation, it leaves this stubborn file!
The question now is how to delete it completely!

I am going to delete its key in the registry.

Thank you very much
 

My Computer My Computer

OS
Windows 7
You should be able to copy/paste either "Promptservice.exe" or "Pwd Promt Service" into Start >Search. I would search for both.

Then at the bottom you may see 'See more results' when that window opens click on 'Organize' in the menu bar.

Move down to 'Select All' you should see all the files listed highlite themselves in blue.

Go anywhere on them, and >Right click >Delete.

Any files that remain may need a more persistent form of deletion.
 

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Gateway DX4831-01e (Mid-Tower Desktop)
OS
Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
CPU
Intel i3 530 2.93GHz, 2933MHz 2 Cores 4 Logical Processors
Motherboard
Gateway H57M01 133 megahertz
Memory
6GB of 1,333MHz DDR3 SDRAM
Graphics Card(s)
32MB Intel Graphics Media Accelerator HD IGChip
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Gateway HX2000 20inch TFT active matrix TN
Screen Resolution
1600 x 900 x 59 hertz
Hard Drives
WDC WD10EADS-00M2B0 [HDD] (1000.20 GB) -- drive 0,
HL-DT-ST DVDRAM GH41N [CD-ROM dr]
Four card readers, and Four USB 2.0
PSU
300watts.
Case
Mid-Tower Desktop
Cooling
Stock from Gateway
Keyboard
Natural Ergonomic Keyboard 4000, see Other Info
Mouse
Orig. Gateway wore out now using Insignia USB wired optical
Internet Speed
Vz FIOS 10ms png 57.64Mbps down 65.53Mbps up Speedtest.org
Antivirus
Zamana Anti-logger with Anti-malware, MSE, Windows Firewall,
Browser
IE11.0.9600.19399-Upd ver11.0.135, Firefox 68.0.1 x64
Other Info
System Specs by Belarc.

BIOS: American Megatrends Inc. P01-A0 11/17/2009

Replaced the MS 'Natural' Standard PS/2 Enhanced 101-102 Keyboard with a new Natural Ergonomic Keyboard 4000 on August 1st 2014.

Canon Pixma MG3222 Printer.

Updated to IE11 on 12102015 | Fios Quantum Router g1100

Additional AV: SpywareBlaster, manual Mbam, SAS
Thank you.
I also searched for both in the registry and deleted them.
 

My Computer My Computer

OS
Windows 7
Back
Top