• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers
Exit
Locked
0

Flash9f.ocx magically reappears after successful uninstall

New Here ,
Dec 09, 2009 Dec 09, 2009

Copy link to clipboard

Copied

I have the problem that I cannot remove C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx from my system:

Every time I (seemingly successfully) uninstall this file, i.e., it vanishes from view in Windows Explorer, the file (and the two directories "Macromed\Flash" which I deleted manually afterwards) reappear magically after every boot, despite my following the uninstallation instructions from Adobe ("How to uninstall the Adobe Flash Player plug-in and ActiveX control": http://kb2.adobe.com/cps/141/tn_14157.html) to the letter!

It seems that Windows' System File Protection is restoring it every time.

How can I get rid of this file for good?

Adope Support refuses to help.

Thank you for any help!

Views

2.6K

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 09, 2009 Dec 09, 2009

Copy link to clipboard

Copied

P.S.: I am running Windows XP Home.


Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

The normal way of uninstalling the Flash Player ActiveX is

- running the downloaded uninstaller

- or using Add/Remove Programs

- or running %WINDIR%\system32\Macromed\Flash\uninstall_activeX.exe

After this you reboot Windows without deleting anything manually.  This should completely remove Flash Player and all its components from your system.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

That's what I did, to no avail.

The problem is NOT deleting the file, the problem is that it keeps COMING

BACK all the time!

2009/12/10 ʇɐb ɹəuəllıʍ <forums@adobe.com>

The normal way of uninstalling the Flash Player ActiveX is

- running the downloaded uninstaller

- or using Add/Remove Programs

- or running %WINDIR%\system32\Macromed\Flash\uninstall_activeX.exe

>

After this you reboot Windows without deleting anything manually. This

should completely remove Flash Player and all its components from your

system.

>

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

The same problem, I also can not remove this component. What could be the reason? Thank you.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

I suspect that Windows File Protection (WFP) is the cause of the problem.

But I don't know how to solve this.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

3rd-party (non-Windows) files should never be under WFP.  Can you check the DLL cache (%systemroot%\system32\dllcache) if the file is in there? Can you temporarily disable WPF (http://www.microsoft.com/whdc/archive/wfp.mspx#E4H), then run the uninstall again, to see if this is really the case?

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Guest
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

Hello, I don't think WFP has anything to do with uninstalling FP. I've removed several different programs from XP.

The following link       http://go.adobe.com/kb/ts_tn_14157_en-us  is for uninstalling. However, you must follow the

instructions completely. I see your running XP, if you're using IE, there is a special paragraph that applies.

I would read carefully the instructions at that link and then go to Add/Remove and see if FP is still there.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Dec 10, 2009 Dec 10, 2009

Copy link to clipboard

Copied

The poster claims that s/he has followed article tn_14157 to the letter.

Yet something doesn't make sense.  The OCX should remain in the Flash folder until the reboot.  If the file is still there, then the word "reappears" is not true; only if the poster had manually deleted the file beforehand.  I have instructed not to do so, but the word "reappears" is still used.

We cannot know what is going on until we get a full explanation.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 11, 2009 Dec 11, 2009

Copy link to clipboard

Copied

2009/12/11 eidnolb <forums@adobe.com>

*Hello, I don't think WFP has anything to do with uninstalling FP. I've

removed several different programs from XP.*

*The following link http://go.adobe.com/kb/ts_tn_14157_en-us is for

uninstalling. However, you must follow the*

*instructions completely. I see your running XP, if you're using IE, there

is a special paragraph that applies.*

*I would read carefully the instructions at that link and then go to

Add/Remove and see if FP is still there.*

>

As I said before, REMOVING the file is NOT the problem!

That works like a charm!

The REAL problem is that after the next reboot, the file is back!

2009/12/11 ʇɐb ɹəuəllıʍ <forums@adobe.com>

The poster claims that he has followed article tn_14157 to the letter.

Yet something doesn't make sense. The OCX should remain in the Flash

folder until the reboot. If the file is still there, then the word

"reappears" is not true; only if the poster had manually deleted the file

beforehand. I have instructed not to do so, but the word "reappears" is

still used.

We cannot know what is going on until we get a full explanation.

>

Something does not make sense INDEED!

And that's EXACTLY the problem!

When I run the tool

uninstall_flash_player.exe<http://download.macromedia.com/pub/flashplayer/current/uninstall_flash_player.exe>from

http://go.adobe.com/kb/ts_tn_14157_en-us, the file

C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx DISAPPEARS.

"Disappears" meaning: It is not visible anymore neither in Windows Explorer

nor in Command Prompt, DESPITE the fact that in Windows Explorer the Display

Option "Show hidden files and folders" is ON, as well as "Display the

contents of system folders", and "Hide protected operating system files

(Recommended)" is OFF. So I presume the file is really deleted. (Maybe I

should check the trash can? But I suspect that it is not even moved to the

trash can but deleted directly...)

Then I reboot (following exactly the instructions from

http://go.adobe.com/kb/ts_tn_14157_en-us), and after the machine has

finished booting (and loading everything, after log-on), when I look in

C:\WINDOWS\system32\Macromed\Flash, the file Flash9f.ocx is back.

Interestingly with a file modification date which is the time of the reboot.

BTW, Flash Player has long been removed in the "Software" control panel and

has never reappered there ever since.

2009/12/11 ʇɐb ɹəuəllıʍ <forums@adobe.com>

3rd-party (non-Windows) files should never be under WFP. Can you check the

DLL cache (%systemroot%\system32\

>

dllcache) if the file is in there? Can you temporarily disable WPF (

http://www.microsoft.com/whdc/archive/wfp.mspx#E4H), then run the

uninstall again, to see if this is really the case?

>

Indeed, non-Windows files should never be under WFP.

But it looks like this one is.

Maybe because the manufacturer of the EeePC has decided he wanted it to be

so?

I already checked the "dllcache" directory, and there is no copy of the file

to be found there, not even under another name (at least none starting with

"flash").

Somewhere in the forums it was said that disabling WFP in the registry

stopped working with SP3.

Besides, I don't have a kernel debugger attached to the system via null

modem cable to be able to use SFCDisable = 1 or SFCDisable = 2.

That's why I tried "XPlite_TRIAL.exe" (from

http://www.litepc.com/download/xplitetrial/xplite_trial.zip) instead, but

unfortunately, to no avail.

I also tried Hack Method 5 from http://www.bitsum.com/aboutwfp.asp, but

SFCFILES.DLL does not even contain the string "Flash", let alone

Flash9f.ocx.

The registry also does not contain the string "Flash9f", BTW.

Any ideas?

Thank you!!!

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 12, 2009 Dec 12, 2009

Copy link to clipboard

Copied

Hi all,

as it turns out, Adobe is innocent!

As is Microsoft! (No WFP at work here after all!)

As it turns out, the manufacturer of my computer, ASUS, apparently is responsible for creating this security hole!

The PC in question is an ASUS EeePC 1101HA netbook, and the file C:\Windows\AsScrPro.exe (which is supplied by ASUS) is responsible for resuscitating the file C:\WINDOWS\system32\macromed\flash\Flash9f.ocx all the time, whether or not a newer version of Flash Player is installed.

Guided by a suggestion from ASUS support (thank you!), by turning all "startup" items off in "msconfig" (after which the problem disappeared), and by turning them back on individually, I was able to eventually apprehend the offender.

You can probably imagine that this took hours and an uncountable number of reboots...

Anyway, mystery solved!

Best regards,
ostbey

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Guest
Dec 12, 2009 Dec 12, 2009

Copy link to clipboard

Copied

Hi, well that has to be one for the record books!! Mystery indeed. Glad you were able to get to the bottom of the

problem. Thanks for the feedback.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 12, 2009 Dec 12, 2009

Copy link to clipboard

Copied

All thanks for the information! File is deleted, everything works.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Guest
Dec 12, 2009 Dec 12, 2009

Copy link to clipboard

Copied

Olegan Se, Just curious, did you have the same model of computer?

Thanks

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 14, 2009 Dec 14, 2009

Copy link to clipboard

Copied

LATEST

BTW, I also renamed C:\Windows\AsScrPro.exe to C:\Windows\AsScrPro.exe.disabled.bin, and in the security tab (only available in Windows XP Home Edition through a hack, such as filesecpatch.zip from http://www.filesland.com/companies/Reinhard-Tchorz/products.html) I selected "Deny" reading and executing for all users, in order to prevent accidental re-activation, by msconfig, ASUS Update or in any other way.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines