Deleteing left-over folders in System32

I had long back installed ElaborateBytes Virtual Clone Drive and then uninstalled it using Revo Uninstaller Pro. Recently I noticed some problems. A pendrive plugged in showed as I: Virtual CloneDrive. I reinstalled Virtual CloneDrive with Revo Unintaller Pro tracing the install and then uninstalled it with Revo Unintaller Pro. In the final stage it said the following folders still remain and will be deleted after a restart.

vclone.inf_amd64_d02e2a796b5707a5 (System32 > DriverStore > FileRepository)

ElbyCDIO.sys (System32 > Drivers)

But I find these are still present after the restart. Screenshots below:






I tried to delete these folders as a User-Administrator and then Administrator but I could not.

a) Is it safe to delete these folders and

b) If so how to?

Can I run the Macrium WinPE recovery drive and delete these? I am a little bit wary of trying this without the experts' opinion here .

Can you please tell me what purpose it serves?

OK, here it is.

drivers.txtdrivers.txt

SIW2 said:

Probabaly cant delete them because it has started up.

Check the start type in your system hive services key. If it is 0, 1 or 2 change it to 4.

You can search for likely names to find it , e.g. vclone and elbycd

Then reboot and you should be able to delete those folders.

OK, I searched the Registry and found the DWORD to be 3 - Load on Demand. Changed it to 4 - Disable.
Screenshot:


After the change tried to delete vclone.inf_amd64_d02e2a796b5707a5 both as User -administrator and Administrator. No joy. I only got the message "You require permission from administrators to make changes to this folder" Why shouldn't I delete the "VClone" entry in the root itself? In Windows 7, after uninstalling a program I had done all this"Find" "Find Next" exercise and deleted any entry that related to the program which I considered safe to delete. With Windows 10 hmmmmm... I am reluctant ( I have backed up the registry)

Tekkie Boy said:

Thanks.

Push the Windows Button type: cmd and then select the option: Run as administrator.

In the command prompt run this command:
pnputil /delete-driver oem47.inf /uninstall /force

You should get the messages:
Driver package uninstalled.Driver package deleted successfully.

Then close the command prompt window.

The folder "vclone.inf_amd64_d02e2a796b5707a5" should then no longer be present.

Next step:

Close all files and other applications and do this:

Download the Farbar Recovery Scan Tool from there:
Downloading Farbar Recovery Scan Tool

And then rename the Tool from FRST64.exe to English.exe.

Then download this Fixlist.txt from there: WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free and copy the Fixlist.txt into the same folder as the Farbar Recovery Scan Tool.

After that start the Farbar Tool and then answers the Disclaimer with yes:

Farbar Recovery Scan Tool Disclaimer

Wait for the tool to say "The tool is ready to use" and then click Fix and wait for it to finish.

The Tool creates the Fixlog.txt file in the same folder where the Farbar Tool is located.

Upload the Fixlog.txt here.

Hi

Thanks for your elaborate instructions. Atleast now I know it is OEM47 but for now I shall keep your proposal in abeyance while waiting for other experts' opinion and discussion.

Hello @jumanji,

You MIGHT be able to to that in Safe Mode . . .

> How to Start Windows 10 into Safe Mode or Normal Mode

Alternatively, you will need to CHANGE the owner and take Permissions of the System32 folder. . .

> How to Change Owner of File, Folder, Drive, or Registry Key in Windows 10
> How to Change Permissions of File, Folder, Drive, or Registry Key for Users and Groups in Windows 10

Also, have a look at the Related Tutorials at the BOTTOM of the above Tutorials [ there are a few ], as they may also be related.

I hope this helps.