pwdump have this file on my computer and cant remove it

August 8th, 2016

i scan my computer and found this file
pwdump
i cantnot remove
what should i do
and should i change all my passwords?

pwdump = is a hack tool that is used to grab Windows password hashes from a remote Windows computer.

Answer #1
i would change your passwords
Answer #2
Can you tell where the file(s) are located? Is your virus detector picking it up?
Answer #3
Try this…
Below listed processes dlls files are part of this spyware. To manually get rid of it, follow these instructions (at your own risk).PwDump Removal Instructions Kill the following processes
-1533267128.exe, -1533267128.exe, pwdump3.exe, pwdump3.exe, pwdump3e.exe, pwdump3e.exe, pwservice.exe, pwservice.exe Unregister the following DLLs and reboot
lsaext.dll, lsaext.dll.
Remove the following files
-1533267128.exe, -1533267128.exe, lsaext.dll, lsaext.dll, lsaext.dsp, lsaext.dsp, lsaext.lib, lsaext.lib, pwdump3.dsp, pwdump3.dsp, pwdump3.dsw, pwdump3.dsw, pwdump3.exe, pwdump3.exe, pwdump3e.dsp, pwdump3e.dsp, pwdump3e.dsw, pwdump3e.dsw, pwdump3e.exe, pwdump3e.exe, pwservice.dsp, pwservice.dsp, pwservice.exe, pwservice.exe, readme, readme.
If you have Symantec Antivirus then go here on how to remove this…
http://www.symantec.com/security_response/writeup.jsp?docid=2005-032616-0025-99&tabid=3
Answer #4
i deleted it from but when i scan its still there what do i do?
Answer #5
If your still having trouble trying to delete the file try this app called Killbox. Open up that app find the file and killbox should be able to rid you of it.
 http://killbox.net/
download –  http://killbox.net/downloads/KillBox.exe
Answer #6
i dont know where the file is tho?
Answer #7
If it’s a virus try Spybot Search and Destroy
If it’s just a file try Unlocker.

Answer #8

saturnsid wrote: Select all


If it’s just a file try Unlocker.
+1

Answer #9
the thing is i cant find the file
Answer #10
search for it, it may have been put in multiple locations
Answer #11
i did nothing comes up
Answer #12
Just use unlocker and delete that thing
Answer #13
It might be a hidden file which will not show up on a search.
To unhide all the files on your PC:
Open Windows Explorer (Not Internet Explorer!)
Menu at top:
Tools~ Folders are not allowed ~ Options/View
Check ‘Show hidden files and folders’
Scroll down and uncheck ‘Hide protected operating system files (Recommended)
Click yes on any warning window that pops up.
Then go do a search again.
Revert these settings back to what they were when you have finished.

Answer #14
i have done that but still no lucky search didnt find it
Answer #15
How are you searching?
Also, try searching for Hacktool.Pwdump
If it’s a virus there’s some info here:
http://www.symantec.com/security_response/writeup.jsp?docid=2005-032616-0025-99&tabid=3
Some more files also related to this virus:
samdump.dll
samdump.dsp
-1545927551.exe
719f94ebc.$
disclaimer
pwdump2.c
pwdump2.dsp
pwdump2.exe
pwdump2.h
readme.html
samdump.c
samdump.dll
pwdump2.exe
-1545927551.exe

Answer #16
so do i search for all these???
Answer #17
Try Start > Search> type what u are searching for in all files or folders > if ur in xp (if vista just type what ur looking for) > click search and wait for it to try and find what file you want > delete the file if its found.
Answer #18
tryed that didnt find it
Answer #19
man why must life be so complicated, well at least turn off sytem restore if your going to remove it or use it to go back to another day when you didnt have it. If all else fails i would try to repair your windows folder off of the Install CD and see if that helps..
Answer #20
OK, so you say you scanned your computer and found the file.
What did you scan it with? And is the file still there when you ‘scan’ again?
Strange that a search can’t find anything ……. unless of course the file has an entirely different name from that which shows up (this can happen with certain viruses)
Have you tried Spybot Search and Destroy?

Answer #21
i got so smiling that i format my whole drive and reinstalled windows everything is good thanks tho
closed