Forum Thread: PSI 'detects' a Flash10x.ocx file that's not present

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Flash Player 10.x

This thread has been marked as locked.
MiG__ PSI 'detects' a Flash10x.ocx file that's not present
Member 9th Mar, 2012 11:24
Ranking: 2
Posts: 8
User Since: 15th Feb, 2011
System Score: N/A
Location: NL
Last edited on 9th Mar, 2012 11:25

Strange one this. Saw a Flash update notification, installed the new one... then PSI insisted Flash 10 was still on my system. So I uninstalled all instances of Flash from add and remove programs again, then reinstalled, checked browser plugin lists, did a reboot just to be sure, used Adobe's Flash uninstaller app... all to no avail. Then I decided to have a look at the location PSI continues to detect the file... Turns out it's not there!

PSI detects: C:\WINDOWS\system32\Macromed\Flash\Flash10x.ocx



C:\WINDOWS\system32\Macromed\Flash>dir

Directory of C:\WINDOWS\system32\Macromed\Flash

09-03-2012 10:46 <DIR> .
09-03-2012 10:46 <DIR> ..
09-03-2012 11:00 50,076 FlashInstall.log
23-12-2011 21:51 <DIR> FlashPlayerTrust
1 File(s) 50,076 bytes
3 Dir(s) 4,365,651,968 bytes free

C:\WINDOWS\system32\Macromed\Flash>dir /ah

Directory of C:\WINDOWS\system32\Macromed\Flash

File Not Found

C:\WINDOWS\system32\Macromed\Flash>dir /ad

Directory of C:\WINDOWS\system32\Macromed\Flash

09-03-2012 10:46 <DIR> .
09-03-2012 10:46 <DIR> ..
23-12-2011 21:51 <DIR> FlashPlayerTrust
0 File(s) 0 bytes
3 Dir(s) 4,312,010,752 bytes free

C:\WINDOWS\system32\Macromed\Flash>dir /as

Directory of C:\WINDOWS\system32\Macromed\Flash

File Not Found



What would PSI base this detection on?

Mind you, I've already done several reboots, so I doubt it'd be something that was loaded or previously there, and I can't find any registry keys pointing to the non existent file either. I'm using WinXP SP3 btw, so there are also no UAC like ways of completely hiding something from an administrator.

Maurice Joyce RE: PSI 'detects' a Flash10x.ocx file that's not present
Handling Contributor 9th Mar, 2012 11:52
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Does this help to find & delete it? Make sure U exit all browsers/Messenger Live & any other programme where Flash could be active.

DELETING A FILE OR FOLDER USING PSI VERSION 2

To delete a vulnerable file or folder found by PSI try this:

1. Open PSI>Scan results.

2. Against the programme marked as vulnerable is a + sign to the left of it.

3. Click that & it will reveal DETECTED INSTANCES.

4. Below that are two yellow folders. Click the one WITHOUT a red dot.

5. That will open Windows Explorer & U will be able to see the vulnerable files or folders.
C:\WINDOWS\system32\Macromed\Flash\Flash10x.ocx

6. Right click on it & select delete.

7. Carry out a full PSI scan & all should be in order.



Update 2 23:40 14/01/2012




--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
MiG__ RE: PSI 'detects' a Flash10x.ocx file that's not present
Member 9th Mar, 2012 12:56
Score: 2
Posts: 8
User Since: 15th Feb 2011
System Score: N/A
Location: NL
Last edited on 9th Mar, 2012 12:56
That would be the thing that lead me to said directory in the first place...
Strangely the *third* full scan I just did made it disappear, so perhaps PSI is accidentally caching something somewhere?
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI 'detects' a Flash10x.ocx file that's not present
Handling Contributor 9th Mar, 2012 13:00
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Possible - the Forum has a fair amount of Flash woes on it. Looks like U are all fixed up?

On that basis, I will lock this thread for U sometime tomorrow unless U post back asking for it to be left open.

This will protect your mail box from possible update emails from Forum "tag on" posts

You can of course lock your own threads yourself. Just click the ACCEPT button in the post of the helper who offered U the best solution/advice to solve your problem.

Secunia Support can always reopen threads by applying by email to: support@secunia.com




--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
MiG__ RE: PSI 'detects' a Flash10x.ocx file that's not present
Member 9th Mar, 2012 15:31
Score: 2
Posts: 8
User Since: 15th Feb 2011
System Score: N/A
Location: NL
Last edited on 9th Mar, 2012 15:31
I suppose in hindsight it's more of a bug report. A file, confirmed to be non existent, that keeps being detected by PSI after multiple uninstalls, reboots and scans doesn't seem quite right :)
Was this reply relevant?
+1
-0

This thread has been marked as locked.