Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Removing leftover bits of NCH software

08 Apr 2013   #1
Raptor77

W7 64 bit
 
 
Removing leftover bits of NCH software

Hi, I think I have something leftover from an uninstall and I'd prefer to get rid of whatever is left if possible please.

My CPU was consistently running at 50% when using audio programs (iTunes, VLC etc) and the culprit was the System Process. I later found out it was "stdriverx64.sys" specifically, and that it is associated with NCH software. As such I've attempted to remove those programs (via Control Panel). This has solved the CPU problem and all but two of the programs seem to have been removed successfully.

The remaining programs are "Prism Video File Converter" and "Express Zip". If I log in as Admin, these are NOT present in the Control Panel uninstall screen, however they are present when logged in as my usual user account (no admin rights). Clicking uninstall does not work: for Prism nothing happens, and for Express Zip I get the message "Access denied while deleted registry contents" followed by a reboot request which does not help. The same thing happens via CCleaner. I also tried a different third party uninstaller but it was also unable to help ("Best Uninstall Tool").

Is there a way I can get rid of these?

Thanks for any help!


OS: Windows 7 Home Premium 64bit + Service Pack 1


My System SpecsSystem Spec
.
08 Apr 2013   #2
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Let's see if AdwCleaner finds and removes some of the 'left-overs'.

Download AdWareCleaner AdwCleaner Download to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.
My System SpecsSystem Spec
08 Apr 2013   #3
Raptor77

W7 64 bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Let's see if AdwCleaner finds and removes some of the 'left-overs'.
Thanks for the reply. I don't think I can see anything about Prism or Express Zip in the text file but it's below anyway.
My System SpecsSystem Spec
.

08 Apr 2013   #4
Raptor77

W7 64 bit
 
 

# AdwCleaner v2.200 - Logfile created 04/08/2013 at 21:14:01
# Updated 02/04/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Admin - DESK1
# Boot Mode : Normal
# Running from : C:\Users\____\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : \END
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\OApps
Folder Deleted : C:\Users\Admin\AppData\Local\Conduit
Folder Deleted : C:\Users\Admin\AppData\Local\PackageAware
Folder Deleted : C:\Users\Admin\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4qndp34.default\Smartbar

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2801948
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0.1 (en-US)

File : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4qndp34.default\prefs.js

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4qndp34.default\user.js ... Deleted !

Deleted : user_pref("CT2801948.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT2801948.1000082.state", "{\"state\":\"stopped\",\"text\":\"Virgin Ra...\",\"description[...]
Deleted : user_pref("CT2801948.1000234.TWC_TMP_city", "______");
Deleted : user_pref("CT2801948.1000234.TWC_TMP_country", "__");
Deleted : user_pref("CT2801948.1000234.TWC_locId", "________");
Deleted : user_pref("CT2801948.1000234.TWC_location", "______, ______________");
Deleted : user_pref("CT2801948.1000234.TWC_region", "__");
Deleted : user_pref("CT2801948.1000234.TWC_temp_dis", "c");
Deleted : user_pref("CT2801948.1000234.TWC_wind_dis", "mph");
Deleted : user_pref("CT2801948.1000234.weatherData", "{\"icon\":\"29.png\",\"temperature\":\"3C\",\"temperatu[...]
Deleted : user_pref("CT2801948.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2801948.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT2801948.FirstTime", "true");
Deleted : user_pref("CT2801948.FirstTimeFF3", "true");
Deleted : user_pref("CT2801948.UserID", "UN08804325530044865");
Deleted : user_pref("CT2801948.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT2801948.autoDisableScopes", -1);
Deleted : user_pref("CT2801948.defaultSearch", "false");
Deleted : user_pref("CT2801948.embeddedsData", "[{\"appId\":\"129306881621438061\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT2801948.enableAlerts", "always");
Deleted : user_pref("CT2801948.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT2801948.firstTimeDialogOpened", "true");
Deleted : user_pref("CT2801948.fixPageNotFoundError", "true");
Deleted : user_pref("CT2801948.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT2801948.fixUrls", true);
Deleted : user_pref("CT2801948.hxxp___pinterest_aot_im.isEnabled", "Y");
Deleted : user_pref("CT2801948.installId", "ConduitInstaller.exe");
Deleted : user_pref("CT2801948.installType", "ConduitNSISIntegration");
Deleted : user_pref("CT2801948.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2801948.isNewTabEnabled", true);
Deleted : user_pref("CT2801948.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT2801948.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT2801948.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"file%[...]
Deleted : user_pref("CT2801948.openThankYouPage", "false");
Deleted : user_pref("CT2801948.openUninstallPage", "true");
Deleted : user_pref("CT2801948.search.searchAppId", "129306881621438061");
Deleted : user_pref("CT2801948.search.searchCount", "0");
Deleted : user_pref("CT2801948.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT2801948.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2801948.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT2801948.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\[...]
Deleted : user_pref("CT2801948.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT2801948.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT2801948.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT2801948.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT2801948.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1345797620751");
Deleted : user_pref("CT2801948.serviceLayer_services_appsMetadata_lastUpdate", "1345797620660");
Deleted : user_pref("CT2801948.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1345797621147");
Deleted : user_pref("CT2801948.serviceLayer_services_login_10.10.22.13_lastUpdate", "1345797621524");
Deleted : user_pref("CT2801948.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1345797621207");
Deleted : user_pref("CT2801948.serviceLayer_services_searchAPI_lastUpdate", "1345797620362");
Deleted : user_pref("CT2801948.serviceLayer_services_serviceMap_lastUpdate", "1345797619876");
Deleted : user_pref("CT2801948.serviceLayer_services_toolbarContextMenu_lastUpdate", "1345797621191");
Deleted : user_pref("CT2801948.serviceLayer_services_toolbarSettings_lastUpdate", "1345797620327");
Deleted : user_pref("CT2801948.serviceLayer_services_translation_lastUpdate", "1345797620651");
Deleted : user_pref("CT2801948.settingsINI", true);
Deleted : user_pref("CT2801948.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT2801948.smartbar.CTID", "CT2801948");
Deleted : user_pref("CT2801948.smartbar.Uninstall", "0");
Deleted : user_pref("CT2801948.smartbar.toolbarName", "NCH EN ");
Deleted : user_pref("CT2801948.startPage", "false");
Deleted : user_pref("CT2801948.toolbarBornServerTime", "24-8-2012");
Deleted : user_pref("CT2801948.toolbarCurrentServerTime", "24-8-2012");
Deleted : user_pref("CT2801948.twitter_v1.8.0_twitter_app_open_t_f", "false");

File : C:\Users\___\AppData\Roaming\Mozilla\Firefox\Profiles\uhxy54oq.default\prefs.js

Deleted : user_pref("extensions.enabledAddons", "DivXWebPlayer%40divx.com:2.0.2.039,en-GB%40dictionaries.addon[...]

*************************

AdwCleaner[S1].txt - [7834 octets] - [08/04/2013 21:14:01]

########## EOF - \AdwCleaner[S1].txt - [7894 octets] ##########
My System SpecsSystem Spec
08 Apr 2013   #5
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Looks like it deleted the 'toolbar', plus a bunch of other bundled foistware!

Deleted : user_pref("CT2801948.smartbar.toolbarName", "NCH EN ");

Now navigate to C:\Users\[YourUserName]\AppData\Roaming <--- and delete the NCH Vision folder.
My System SpecsSystem Spec
08 Apr 2013   #6
Raptor77

W7 64 bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Looks like it deleted the 'toolbar', plus a bunch of other bundled foistware!

Deleted : user_pref("CT2801948.smartbar.toolbarName", "NCH EN ");

Now navigate to C:\Users\[YourUserName]\AppData\Roaming <--- and delete the NCH Vision folder.

Ah yeah I missed that one. And yay for deleting other unwanteds

The NCH folder in Roaming is actually "NCH Software" - should I still just delete it? Looks like it contains the Prism/Express Zip exe's and dll's etc.
My System SpecsSystem Spec
08 Apr 2013   #7
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Yes, just delete it.

If it won't delet in 'normal' mode .. go into safe mode (so it's not running) and delete the entire folder.
My System SpecsSystem Spec
08 Apr 2013   #8
ZomBob

Windows 7 Home Premium 64bit
 
 

Seriously well done sir. I have to say that for a free community forum this is one of the more helpful I have encountered. Kudos.
My System SpecsSystem Spec
08 Apr 2013   #9
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Thank you ZomBob, but I'm a 'she'... not a 'sir'
My System SpecsSystem Spec
09 Apr 2013   #10
Raptor77

W7 64 bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Yes, just delete it.

If it won't delet in 'normal' mode .. go into safe mode (so it's not running) and delete the entire folder.

Done - didn't require safe mode. They still showed up in Control Panel but clicking uninstall gave a message saying "It may have already been uninstalled" and I clicked to remove the names from CP anyway.

And to echo ZomBob, this forum is very impressive for help (it's not the first time I've come here with a PC problem). Thanks so much for this, Jacee!

I'll mark as solved and leave rep.
My System SpecsSystem Spec
Reply

 Removing leftover bits of NCH software




Thread Tools




Similar help and support threads
Thread Forum
Any software for removing bad sector
Hello Friends, I have 3 hdd two sata 1 ide all three of them cannot install any windows accept winxp and cannot install Microsoft office 2007 or further so when the troubleshooting process started it came out through a seatools cd of Seagate website downloaded for Seagate hdd I ran it and...
Hardware & Devices
Upgrade to Windows 7 home perm 64 bits from Vista 32 bits
my desktop is Dell XPS 730. it currently using Vista 32 bits. Everything runs very slow and none of games are runnable due frames dropping, skipping, and freezing even after I installed new Hard Drive. I decided upgrade to Windows 7 64 bits would help with running minecraft game without issue. ...
Installation & Setup
16-bits program error message in 64-bits W7...
This is a rather unsual error message from Windows 7, that cannot even run 16-bits programs, quote: "Too many other files are currently in use by 16-bit programs. Exit one or more 16-bit programs, or increase the value of files in your Config.sys file." The only time that this issue shows...
Performance & Maintenance
How to remove all uninstalled software "bits" ?
Hi, I removed (?) all the bloatware and software I did not wanted to use that came with my Toshiba laptop! Ex: McAfee, Nero, etc...I removed via Control Panel/Uninstall programs! But I know that almost all the time, there are still "bits" of those sw that remain in the computer! My question:...
Performance & Maintenance
getting popups generated by blubster even after removing the software
I had a ptp program called blubster installed on my computer. It generated pop ups in Internet Explorer 7 even when i didn't have the browser open. I have IE set to not allow pop ups. I uninstalled blubster but i am still getting the pop ups. so I stopped using IE7 and have been using Firefox. ...
System Security
Seagate External HD Software & 64 Bits ?
Hello, I have 2 Seagate Free Agent external hard drives that I use for backup. One is that older brown case type, that stands vertically. The other is a newer style; silver case, lighted logo, and lays flat. I am running Windows 7, the 64 bit version. I now have these hard drives...
Hardware & Devices


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:48.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App