If you are a non-second generation secret user, you only need to provide the old password, and you can set a new password after successful verification. If you are a second-generation secret user, you can set a new password by answering the second-generation secret information (including secret questions, secret mobile phones, secret cards and secret tokens), which is one of the means to verify the secret.
Your computer should be poisoned. You'd better kill virus before changing the password.