Password Changer removal

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by hitme64, Aug 8, 2005.

  1. hitme64

    hitme64 Private E-2

    how do you delete pwd_chng.exe (password changer) program on the desktop which was downloaded from its site? tried usual delete procedures and used even spyware removal but the file just won't be deleted. a message pops up "can't delete file being used by another program" but there is no other program using it.
     
    hitme64, Aug 8, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try booting in safe mode and deleting it. Also make sure there are no processes running related to it by looking at processes with Task Manager.
     
    chaslang, Aug 8, 2005
    #2
  3. hitme64

    hitme64 Private E-2

    ok chaslang will do it now. thanks.
     
    hitme64, Aug 8, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Let me know your results!
     
    chaslang, Aug 9, 2005
    #4
  5. hitme64

    hitme64 Private E-2

    oopps didn't work chaslang. am using an hp pavilion laptop. i was able to remove it however in another desktop which isn't branded. the same message appears "can't delete file being used by another program." it doesn't do anything though.
     
    hitme64, Aug 9, 2005
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Instead of deleting the file, try moving it off your Desktop into a different folder. Then reboot. Now try to delete the file from wherever you moved it to.

    Also you could try to rename the file while it is still on your Desktop. To something like pwd_chng.xxx

    If that works, reboot and then try to delete it.

    If neither of those steps work, tell me what the full path to the filename on your Desktop is.

    C:\Documents and Settings\usrname\Desktop\pwd_chng.exe

    Where usrname is your user ID?
     
    Last edited: Aug 9, 2005
    chaslang, Aug 9, 2005
    #6
  7. hitme64

    hitme64 Private E-2

    no can do chaslang. tried to rename and transfer it to another folder but both didn't budge. still got the same message. the properties for the file is: c:\Documents and Settings\CIDG-ADCO\Desktop\pwd_chng.exe
     
    hitme64, Aug 11, 2005
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please download Pocket KillBox and extract it to its own folder somewhere.

    Please run Pocket Killbox. Select the option to Replace on Reboot.

    Now, Copy and Paste c:\Documents and Settings\CIDG-ADCO\Desktop\pwd_chng.exe into the box and check the option to Use Dummy. Now, Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click Yes!

    Okay so now your PC should be reboot. If you get an error message about Pending Operations, just reboot your PC yourself.


    Now reboot in normal mode and tell me what happened.
     
    chaslang, Aug 12, 2005
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds