Copy link to clipboard
Copied
I have the problem that I cannot remove C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx from my system:
Every time I (seemingly successfully) uninstall this file, i.e., it vanishes from view in Windows Explorer, the file (and the two directories "Macromed\Flash" which I deleted manually afterwards) reappear magically after every boot, despite my following the uninstallation instructions from Adobe ("How to uninstall the Adobe Flash Player plug-in and ActiveX control": http://kb2.adobe.com/cps/141/tn_14157.html) to the letter!
It seems that Windows' System File Protection is restoring it every time.
How can I get rid of this file for good?
Adope Support refuses to help.
Thank you for any help!
Copy link to clipboard
Copied
P.S.: I am running Windows XP Home.
Copy link to clipboard
Copied
The normal way of uninstalling the Flash Player ActiveX is
- running the downloaded uninstaller
- or using Add/Remove Programs
- or running %WINDIR%\system32\Macromed\Flash\uninstall_activeX.exe
After this you reboot Windows without deleting anything manually. This should completely remove Flash Player and all its components from your system.
Copy link to clipboard
Copied
That's what I did, to no avail.
The problem is NOT deleting the file, the problem is that it keeps COMING
BACK all the time!
2009/12/10 ʇɐb ɹəuəllıʍ <forums@adobe.com>
The normal way of uninstalling the Flash Player ActiveX is
- running the downloaded uninstaller
- or using Add/Remove Programs
- or running %WINDIR%\system32\Macromed\Flash\uninstall_activeX.exe
>
After this you reboot Windows without deleting anything manually. This
should completely remove Flash Player and all its components from your
system.
>
Copy link to clipboard
Copied
The same problem, I also can not remove this component. What could be the reason? Thank you.
Copy link to clipboard
Copied
I suspect that Windows File Protection (WFP) is the cause of the problem.
But I don't know how to solve this.
Copy link to clipboard
Copied
3rd-party (non-Windows) files should never be under WFP. Can you check the DLL cache (%systemroot%\system32\dllcache) if the file is in there? Can you temporarily disable WPF (http://www.microsoft.com/whdc/archive/wfp.mspx#E4H), then run the uninstall again, to see if this is really the case?
Copy link to clipboard
Copied
Hello, I don't think WFP has anything to do with uninstalling FP. I've removed several different programs from XP.
The following link http://go.adobe.com/kb/ts_tn_14157_en-us is for uninstalling. However, you must follow the
instructions completely. I see your running XP, if you're using IE, there is a special paragraph that applies.
I would read carefully the instructions at that link and then go to Add/Remove and see if FP is still there.
Copy link to clipboard
Copied
The poster claims that s/he has followed article tn_14157 to the letter.
Yet something doesn't make sense. The OCX should remain in the Flash folder until the reboot. If the file is still there, then the word "reappears" is not true; only if the poster had manually deleted the file beforehand. I have instructed not to do so, but the word "reappears" is still used.
We cannot know what is going on until we get a full explanation.
Copy link to clipboard
Copied
2009/12/11 eidnolb <forums@adobe.com>
*Hello, I don't think WFP has anything to do with uninstalling FP. I've
removed several different programs from XP.*
*The following link http://go.adobe.com/kb/ts_tn_14157_en-us is for
uninstalling. However, you must follow the*
*instructions completely. I see your running XP, if you're using IE, there
is a special paragraph that applies.*
*I would read carefully the instructions at that link and then go to
Add/Remove and see if FP is still there.*
>
As I said before, REMOVING the file is NOT the problem!
That works like a charm!
The REAL problem is that after the next reboot, the file is back!
2009/12/11 ʇɐb ɹəuəllıʍ <forums@adobe.com>
The poster claims that he has followed article tn_14157 to the letter.
Yet something doesn't make sense. The OCX should remain in the Flash
folder until the reboot. If the file is still there, then the word
"reappears" is not true; only if the poster had manually deleted the file
beforehand. I have instructed not to do so, but the word "reappears" is
still used.
We cannot know what is going on until we get a full explanation.
>
Something does not make sense INDEED!
And that's EXACTLY the problem!
When I run the tool
uninstall_flash_player.exe<http://download.macromedia.com/pub/flashplayer/current/uninstall_flash_player.exe>from
http://go.adobe.com/kb/ts_tn_14157_en-us, the file
C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx DISAPPEARS.
"Disappears" meaning: It is not visible anymore neither in Windows Explorer
nor in Command Prompt, DESPITE the fact that in Windows Explorer the Display
Option "Show hidden files and folders" is ON, as well as "Display the
contents of system folders", and "Hide protected operating system files
(Recommended)" is OFF. So I presume the file is really deleted. (Maybe I
should check the trash can? But I suspect that it is not even moved to the
trash can but deleted directly...)
Then I reboot (following exactly the instructions from
http://go.adobe.com/kb/ts_tn_14157_en-us), and after the machine has
finished booting (and loading everything, after log-on), when I look in
C:\WINDOWS\system32\Macromed\Flash, the file Flash9f.ocx is back.
Interestingly with a file modification date which is the time of the reboot.
BTW, Flash Player has long been removed in the "Software" control panel and
has never reappered there ever since.
2009/12/11 ʇɐb ɹəuəllıʍ <forums@adobe.com>
3rd-party (non-Windows) files should never be under WFP. Can you check the
DLL cache (%systemroot%\system32\
>
dllcache) if the file is in there? Can you temporarily disable WPF (
http://www.microsoft.com/whdc/archive/wfp.mspx#E4H), then run the
uninstall again, to see if this is really the case?
>
Indeed, non-Windows files should never be under WFP.
But it looks like this one is.
Maybe because the manufacturer of the EeePC has decided he wanted it to be
so?
I already checked the "dllcache" directory, and there is no copy of the file
to be found there, not even under another name (at least none starting with
"flash").
Somewhere in the forums it was said that disabling WFP in the registry
stopped working with SP3.
Besides, I don't have a kernel debugger attached to the system via null
modem cable to be able to use SFCDisable = 1 or SFCDisable = 2.
That's why I tried "XPlite_TRIAL.exe" (from
http://www.litepc.com/download/xplitetrial/xplite_trial.zip) instead, but
unfortunately, to no avail.
I also tried Hack Method 5 from http://www.bitsum.com/aboutwfp.asp, but
SFCFILES.DLL does not even contain the string "Flash", let alone
Flash9f.ocx.
The registry also does not contain the string "Flash9f", BTW.
Any ideas?
Thank you!!!
Copy link to clipboard
Copied
Hi all,
as it turns out, Adobe is innocent!
As is Microsoft! (No WFP at work here after all!)
As it turns out, the manufacturer of my computer, ASUS, apparently is responsible for creating this security hole!
The PC in question is an ASUS EeePC 1101HA netbook, and the file C:\Windows\AsScrPro.exe (which is supplied by ASUS) is responsible for resuscitating the file C:\WINDOWS\system32\macromed\flash\Flash9f.ocx all the time, whether or not a newer version of Flash Player is installed.
Guided by a suggestion from ASUS support (thank you!), by turning all "startup" items off in "msconfig" (after which the problem disappeared), and by turning them back on individually, I was able to eventually apprehend the offender.
You can probably imagine that this took hours and an uncountable number of reboots...
Anyway, mystery solved!
Best regards,
ostbey
Copy link to clipboard
Copied
Hi, well that has to be one for the record books!! Mystery indeed. Glad you were able to get to the bottom of the
problem. Thanks for the feedback.
Copy link to clipboard
Copied
All thanks for the information! File is deleted, everything works.
Copy link to clipboard
Copied
Olegan Se, Just curious, did you have the same model of computer?
Thanks
Copy link to clipboard
Copied
BTW, I also renamed C:\Windows\AsScrPro.exe to C:\Windows\AsScrPro.exe.disabled.bin, and in the security tab (only available in Windows XP Home Edition through a hack, such as filesecpatch.zip from http://www.filesland.com/companies/Reinhard-Tchorz/products.html) I selected "Deny" reading and executing for all users, in order to prevent accidental re-activation, by msconfig, ASUS Update or in any other way.