Need to force delete Reg Key

[gregrocker]

I have a Ricoh card driver that starts a service that is erroring on this install. I uninstalled in Control Panel (it's not listed in Services) but it left keys I was able to delete via a REgedit Search - except for one key which is still generating the error and may be running so it won't let me delete it.

Is there an easy way to force delete this? I tried Safe Mode. I can export the key but what editor do I use to mount and delete it and then will regedit let me reimport and overwrite the problem ControlSet PCI/VEN key?

Any ideas?

Log Name:      System
Source:        Service Control Manager
Date:          1/14/2014 4:03:02 PM
Event ID:      7000
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      AcerAspire
Description:
The Ricoh xD-Picture Card Driver service failed to start due to the following error: 
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-01-14T21:03:02.921875000Z" />
    <EventRecordID>4360</EventRecordID>
    <Correlation />
    <Execution ProcessID="472" ThreadID="476" />
    <Channel>System</Channel>
    <Computer>AcerAspire</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Ricoh xD-Picture Card Driver</Data>
    <Data Name="param2">%%1058</Data>
  </EventData>
</Event>

 

[Kaktussoft]

Greg, are you getting "access denied" on that key?
Do you really want to delete the reg key, or just want to modify it?

 

[gregrocker]

There is no Ricoh card on this PC. The software was uninstalled but left the service and a driver rimsptsk which are erroring at every boot and may be slowing performance

. I can't find the Service, deleted the driver from Sys32 drivers folder but it still errors.

I have searched Process explorer for all parameters listed for the Reg key (below) to see what service is running it. Sometimes narrowing the process you can delete the Reg key by killing the process. But it doesn't respond to the Key or any other listing here searched:

 

[Kaktussoft]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\rismxdp]

"Start"=dword:00000002

"DisplayName"="Ricoh xD-Picture Card Driver"

Pretty self explanatory ...is the Flash Memory Card my laptop came shipped with

If you are not gonna use it it is safe to disable "Start"=dword:00000004

 

[gregrocker]

Changed that value for rimsptsk. At reboot the Error is still there

Prob is this laptop has a Texas Instruments card controller driver in Dev Mgr and no other listed for its card slot. I think the Ricoh came from the machine I imaged onto here. I do want the card slot to be functional. How can I check?

 

[Kaktussoft]

Changing that value for rimsptsk

Prob is this laptop has a Texas Instruments card controller driver in Dev Mgr and no other for its card slot. I think the Ricoh came from the machine I imaged onto here. I do want the card slot to be functional. How can I check?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\rimsptsk what are the permissions of the reg key you can't modify?
use psexec to modify it How to REALLY hurt yourself with PSEXEC - Deleting the Undeletable Registry Key and More - Scott Hanselman
pstools from: PsTools

 

[gregrocker]

Psiexec is not recognized when run as admin in CMD. Do I need another console? The second link?

 

[Layback Bear]

Just for information that might help.

rimsptsk.sys Windows process - What is it?

 

[Kaktussoft]

Psiexec is not recognized when run as admin in CMD. Do I need another console?

1. open an elevated command prompt.
2. psexec -s -i regedit.exe

Be sure psexec is in the current folder. Or in the cmd PATH

 

[gregrocker]

So I need pstools download first?

On phone now, doing the regedit on laptop on freeway on way to deliver it (payment big Ital dinner)

 

[Kaktussoft]

So I need pstools download first?

Sorry, I thought you already knew. Install PSTOOLS first. Or get psexec.exe from live.sysinternals.com - /

 

[ComputerGeek]

I have a Ricoh card driver that starts a service that is erroring on this install. I uninstalled in Control Panel (it's not listed in Services) but it left keys I was able to delete via a REgedit Search - except for one key which is still generating the error and may be running so it won't let me delete it.

Is there an easy way to force delete this? I tried Safe Mode. I can export the key but what editor do I use to mount and delete it and then will regedit let me reimport and overwrite the problem ControlSet PCI/VEN key?

Yea, it's a bit confusing but Service Control Manager loads/starts both services AND drivers. I think your error message indicates the DRIVER can't be started. You're trying to delete the hardware reference to the device. I think you need to look for the service controller entry that tries to load the driver.

Run Serviwin. Click View->Drivers. See if there's a reference to the driver there. Note: Device, Driver and Service names are only a comment for us humans as far as Windows is concerned. So you may have deleted the Driver name when you searched and deleted Ricoh registry keys. So look if an entry for either the driver name OR the driver's filename.

 

[gregrocker]

Regedit find driver name rimsptsk then delete each?

 

[ComputerGeek]

Yea, probably worth creating a System Restore point first. Search for rimsptsk and delete the Service Control Manager entry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ as well as any backups under ControlSet01 and 02.

But as to the hardware reference, I see 5 Ricoh devices in your screen shot. Every sub-key under HKLM\SYSTEM\CurrentControlSet\Enum\PCI that begins VEN_1180 is a Ricoh device.

Rather then hacking the registry, I'd Show Non-Present Devices then look in Device Manager for those 5 Ricoh devices->right click Uninstall. (that MS KB applies to all versions of Windows). If you want, I can also take a look at your Device Manager data. Run the 32 or 64 bit version of DevManView. Select all the entries, Ctl-S to save and be sure to change the SAVE AS type to Tab Delimited text (so i can import it into Excel)

/* EDIT */
In fact, may be best to let me see your Device Manager data first so I can see if there are other drivers or other relevant info involved as well with all these Ricoh devices

 

[gregrocker]

The PC is delivered now. I had time to delete the only rimsptsk key found in Registry which might have been a sub-key since it was out on the far right side and not the key itself. Since the owner was downloading pics into ITunes I didn't have a chance to reboot to see if the Ricoh and rimsptsk errors detailed in my first two posts reappeared.

I'm not sure there were any performance problems but the repeat errors at every boot bothered me earlier today when I was culling errors so I had hoped I could get them out before the PC was delivered, and was regediting furiously on the freeway.

From your experience: Do you think these Ricoh keys would appear if there was not any Ricoh card reader on the PC, or could it have been carried over from an image I transferred to the PC from another HP PC I'd done last week? Both had card readers but this PC today had Texas Instruments card controller as only installed Device.

I had uninstalled the RIcol in Control Panel and as you know every other listing for it in Regedit, deleted the rimsptsk file in System 32 drivers and now the only reg key found for it. Is this a state it can be left in, or should I plan to follow up?

 

[ComputerGeek]

If there's no Ricoh card reader on the new PC then i'm certain those device entries are there because of the image.

I looked at those 5 Ricoh devices i saw in your snapshot. Each of those devices is a different type of Ricoh card controller. That makes me guess the old PC had a 5-in-1 Ricoh card reader? That also makes it likely there was more then one driver involved. That said, I still don't see any problem with leaving things as is
> There won't be any appreciable performance hit. (It would only be something we'd probably scrub if it was a home PC belong to one us "purists"
> At worst, the event log may continue to show a Service Control Manager error, but techs are used to seeing event log errors that don't indicate any real problem. So i wouldn't worry about it

/* EDIT */
p.s. I didn't think to ask at the time, but in your snapshot in post #3 which key were you trying to delete? It should have been the subkey that starts VEN_1180. If not, not sure, but that might also have been part of your problem

 

[andrew129260]

and was regediting furiously on the freeway.

And I thought texting while driving was bad.....

Don't mean to offend man but you really should not be doing that while driving.

Glad you (hopefully) got it resolved though.

 

[gregrocker]

and was regediting furiously on the freeway.

And I thought texting while driving was bad.....

Don't mean to offend man but you really should not be doing that while driving.

Glad you (hopefully) got it resolved though.

Not to worry my roommate was driving, to deliver 3 rehabbed PC's and get paid the best E Boston ItAlian meal. Paid in full (and I mean FULL).

 

[andrew129260]

Sweet man. Thats how you do it!