Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

All File transfers hang. No virus!


  • Please log in to reply

#151
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

c:\Windows\System32\SysClass.DLL exists.

 

When I tried to merge, saw the following error for all 4 and first 3 lines you asked me to input:

"Cannot import The specified file is not a registry script.

You can only import binary registry files from within the registry editor."


  • 0

Advertisements


#152
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

Let's try it this way:

 

Download usb3.zip:

 

Right click and Extract All to your desktop, Extract then right click on usb3.reg and Merge.

 

Do you still get the same error?

Attached Files

  • Attached File  usb3.zip   419bytes   25 downloads

  • 0

#153
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

In addition to the above:  I asked on our private forum for someone to export the same key off a Win 7 64 intel machine and I got this:

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}]
"Class"="USB"
"ClassDesc"="@%SystemRoot%\\System32\\SysClass.Dll,-3025"
@="Universal Serial Bus controllers"
"IconPath"=hex(7):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,65,00,74,00,75,00,70,00,61,00,70,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,\
  2d,00,32,00,30,00,00,00,00,00
"NoInstallClass"="1"
"LowerLogoVersion"="5.2"
"UpperFilters"=hex(7):00,00,00,00
"LowerFilters"=hex(7):65,00,64,00,65,00,76,00,6d,00,6f,00,6e,00,00,00,00,00

 

This is  the same as mine except for the Filters so there should be no problem merging the attached reg. which has no filters

Attached File  usb4.zip   565bytes   37 downloads

 

This is basically the same as usb3.reg with a few more lines.  If you have already tried usb3.reg it won't hurt to merge usb4.reg.  If you haven't done usb3 then just do usb4.


  • 0

#154
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

Okay good news. I hadn't tried USB3.

USB4 rid my device manager of question marks and restored 'unknowns' to 'Universal Serial Bus controllers'.

But the scanner still shows the speed error.


Edited by phickspc, 27 March 2018 - 03:39 PM.

  • 0

#155
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

OK.  Let's see what the full key looks like now.


  • 0

#156
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

Attached File  36FC9E60-C465-11CF-8056-444553540000 V6.txt   21.58KB   36 downloads


  • 0

#157
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

The difference between your .reg and the one my colleague sent me is that yours makes no reference to an oem.inf or to intel.  Instead it uses the MS provided usbport.inf which is so generic that it can't take advantage of USB 2.0.

 

This is from a slightly older system than yours but shows:

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0001]
"Controller"=hex:01
"InfPath"="oem10.inf"
"InfSection"="INTEL_USB2_CTTB"
"InfSectionExt"=".NT"
"ProviderName"="Intel"
"DriverDateData"=hex:00,80,13,29,29,21,ca,01
"DriverDate"="8-20-2009"
"DriverVersion"="9.1.1.1020"
"MatchingDeviceId"="pci\\ven_8086&dev_3b3c"
"DriverDesc"="Intel® 5 Series/3400 Series Chipset Family USB Enhanced Host Controller - 3B3C"
"EnumPropPages32"="usbui.dll,USBControllerPropPageProvider"
"IncludedInfs"=hex(7):75,00,73,00,62,00,70,00,6f,00,72,00,74,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00
 

 

There are only two controllers shown and both are enhanced (2.0)

 

Yours shows

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0000]
"EnumPropPages32"="usbui.dll,USBControllerPropPageProvider"
"Controller"=hex:01
"InfPath"="usbport.inf"
"InfSection"="UHCI.Dev"
"InfSectionExt"=".NT"
"ProviderName"="Microsoft"
"DriverDateData"=hex:00,80,8c,a3,c5,94,c6,01
"DriverDate"="6-21-2006"
"DriverVersion"="6.1.7601.18328"
"MatchingDeviceId"="pci\\ven_8086&dev_3a39"
"DriverDesc"="Intel® ICH10 Family USB Universal Host Controller - 3A39"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0001]
"EnumPropPages32"="usbui.dll,USBControllerPropPageProvider"
"Controller"=hex:01
"InfPath"="usbport.inf"
"InfSection"="EHCI.Dev"
"InfSectionExt"=".NT"
"ProviderName"="Microsoft"
"DriverDateData"=hex:00,80,8c,a3,c5,94,c6,01
"DriverDate"="6-21-2006"
"DriverVersion"="6.1.7601.18328"
"MatchingDeviceId"="pci\\ven_8086&dev_3a3a"
"DriverDesc"="Intel® ICH10 Family USB Enhanced Host Controller - 3A3A"
 

The first one is 1.0 the second 2.0.  I'm wondering what would happen if you changed
"InfSection"="UHCI.Dev"

to

"InfSection"="EHCI.Dev"

 

and added Enhanced in the DriverDesc.


  • 0

#158
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

The first one is 1.0 the second 2.0.  I'm wondering what would happen if you changed
"InfSection"="UHCI.Dev"

to

"InfSection"="EHCI.Dev"

 

and added Enhanced in the DriverDesc.

 

Made those changes.

Scanner warning still appears.

Should I reverse the change you asked me to make?

Or Would you like me to continue replacing all the UHCI.devs & Universals in the reg? (there's more then 2 instances of UHCI & Universals) ?


Edited by phickspc, 28 March 2018 - 01:17 PM.

  • 0

#159
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

Worth trying but before you do there are 2 services that seem to be involved in this.

 

usbehci and usbohci

 

Check if they are running by Start, All programs, Accessories, then right click on Command Prompt and run as Admin.  Type:

 

sc start usbehci

 

It should give you an error and say it is already started does it?

 

repeat with

 

sc start usbohci


  • 0

#160
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

Command Prompt results:

C:\Windows\system32>sc start usbehci
[SC] StartService FAILED 1056:

An instance of the service is already running.

C:\Windows\system32>sc start usbohci
[SC] StartService FAILED 1058:

The service cannot be started, either because it is disabled or because it has
no enabled devices associated with it.

 


Edited by phickspc, 29 March 2018 - 07:08 AM.

  • 0

Advertisements


#161
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

The second one may be a clue.

 

Export the key:

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbohci

and let's see what it looks like.

 

Also see if you have the file: C:\Windows\System32\Drivers\usbohci.sys


  • 0

#162
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

C:\Windows\System32\Drivers\usbohci.sys Yes the System32 files exists.

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbohci

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\usbohci]
"Start"=dword:00000003
"Type"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,72,\
  00,69,00,76,00,65,00,72,00,73,00,5c,00,75,00,73,00,62,00,6f,00,68,00,63,00,\
  69,00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="Microsoft USB Open Host Controller Miniport Driver"
"Group"="Base"
"DriverPackageId"="usbport.inf_amd64_neutral_5a41ca742f7973cc"
"BootFlags"=dword:00000004

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\usbohci\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000
"INITSTARTFAILED"=dword:00000001


Edited by phickspc, 29 March 2018 - 09:31 AM.

  • 0

#163
RKinner

RKinner

    Malware Expert

  • Expert
  • 21,445 posts
  • MVP

Export

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbehci


  • 0

#164
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\usbehci]
"Start"=dword:00000003
"Type"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,75,00,73,00,62,00,65,00,68,00,63,\
  00,69,00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="Microsoft USB 2.0 Enhanced Host Controller Miniport Driver"
"Group"="Base"
"DriverPackageId"="usbport.inf_amd64_neutral_5a41ca742f7973cc"
"BootFlags"=dword:00000004
"Tag"=dword:00000012

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\usbehci\Enum]
"0"="PCI\\VEN_8086&DEV_3A3C&SUBSYS_82D41043&REV_00\\3&11583659&0&D7"
"Count"=dword:00000002
"NextInstance"=dword:00000002
"1"="PCI\\VEN_8086&DEV_3A3A&SUBSYS_82D41043&REV_00\\3&11583659&0&EF"


  • 0

#165
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 319 posts

My friend, I'm away for 3 weeks.

Please forgive me but I will have to ask that we pause until then.

Thank you, I look forward to picking this up where we left off!


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP