My Microsoft Edge Browser has been hijacked by Google Chrome

Steps Already Attempted

Process Termination

Ended all Edge‑related processes (msedge.exe, MicrosoftEdgeUpdate.exe, setup.exe, edgeupdate.exe) via Task Manager.

Ownership & Permissions

  Used `takeown` and `icacls` to grant full control to the local user account.
  
     Verified ownership change succeeded.
     
     **Safe Mode**
     
        Booted into Safe Mode to minimize background services.
        
           Retried delete/rename operations with administrator privileges.
           
           **Command Line Attempts**
           
              `rename "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" msedge.old`
              
                 `del /f /q "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"`
                 
                    Both returned **Access Denied**.
                    
                    **PsExec (Sysinternals)**
                    
                       Installed PsExec v2.43.
                       
                          Launched SYSTEM‑level Command Prompt:
                          
                          Code
                          
                          ```
                          PsExec.exe -accepteula -s -i cmd.exe
                          ```
                          
                             Retried delete/rename commands under SYSTEM context.
                             
                                Still received **Access Denied**.
                                
                                **Antivirus Check**
                                
                                   Verified McAfee Total Protection was installed.
                                   
                                      Temporarily disabled Real‑Time Scanning and Firewall.
                                      
                                         Retried delete/rename operations — still blocked.
                                         
                                         **Registry Verification**
                                         
                                            Checked protocol handlers:
                                            
                                            Code
                                            
                                            ```
                                            HKEY_CLASSES_ROOT\http\shell\open\command

HKEY_CLASSES_ROOT\https\shell\open\command ```

                                               Confirmed Edge path was set correctly.
                                               
                                                  Also checked:
                                                  
                                                  Code
                                                  
                                                  ```
                                                  HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice ```

                                                     Verified `ProgId` values.
                                                     

Current Status

msedge.exe remains locked and cannot be deleted or renamed, even under SYSTEM context in Safe Mode with antivirus disabled.

Reinstallation attempts fail because the existing executable cannot be removed.

Request

Please advise on:

Whether Windows File Protection or another system service is preventing removal.

If there is an official Microsoft‑supported method to force removal or repair of Edge when the executable is locked.

• Any advanced tools or scripts available internally to bypass this lock safely.

  Steps Already Attempted

  1. Process Termination
     • Ended all Edge‑related processes (msedge.exe, MicrosoftEdgeUpdate.exe, setup.exe, edgeupdate.exe) via Task Manager.
  2. Ownership & Permissions
     • Used takeown and icacls to grant full control to the local user account.
     • Verified ownership change succeeded.
  3. Safe Mode
     • Booted into Safe Mode to minimize background services.
     • Retried delete/rename operations with administrator privileges.
  4. Command Line Attempts
     • rename "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" msedge.old
     • del /f /q "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
     • Both returned Access Denied.
  5. PsExec (Sysinternals)
     • Installed PsExec v2.43.
     • Launched SYSTEM‑level Command Prompt: Code

               PsExec.exe -accepteula -s -i cmd.exe
       

     • Retried delete/rename commands under SYSTEM context.
     • Still received Access Denied.
  6. Antivirus Check
     • Verified McAfee Total Protection was installed.
     • Temporarily disabled Real‑Time Scanning and Firewall.
     • Retried delete/rename operations — still blocked.
  7. Registry Verification
     • Checked protocol handlers: Code

               HKEY_CLASSES_ROOT\http\shell\open\command
       

HKEY_CLASSES_ROOT\https\shell\open\command ```

  - Confirmed Edge path was set correctly.
  
  - Also checked:
  
    Code
    
    ```
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice ```

  - Verified `ProgId` values.
  

Current Status

• msedge.exe remains locked and cannot be deleted or renamed, even under SYSTEM context in Safe Mode with antivirus disabled.
• Reinstallation attempts fail because the existing executable cannot be removed.

Request

Please advise on:

• Whether Windows File Protection or another system service is preventing removal.
• If there is an official Microsoft‑supported method to force removal or repair of Edge when the executable is locked.
• Any advanced tools or scripts available internally to bypass this lock safely.