PDA

View Full Version : Chingachguk & Denger2k Emulator 0.15.4


GNIREENIGNE
09-08-2009, 06:37 AM
I was able to run the install.bat and 'somewhat' emulate my Hasp HL Time. However, after removing the emulation, I am unable to run the install.bat again. The cmd.exe and devcon.exe screens are blank, and nothing happens. Also, whenever this happens, I am unable to reboot my system without doing a 'forced reboot'.
I have tried several different methods with respect to rebooting, reinstalling/uninstalling original drivers etc. etc.

I have managed to get the emulation installed and operating on two different computers - winXP Pro and a winVista 32bit system.

I am, so far, unable to reinstall the emulator on both systems.

I haven't had a chance to take a look at why the protected software is lagging during certain operations and why it sometimes freezes up during certain operations (this occurs on both systems/OS's). Either I have made a mistake somewhere, or I need to use a different emulation method. -I have been trying to install other emulators to no avail.

I appreciate the help.

foffa
09-08-2009, 08:29 PM
there is must be error with your reg file
recheck it
it cause vbus service to stuck

GNIREENIGNE
09-08-2009, 09:19 PM
Thanks.

[[REMOVED REG -- WILL REPOST]]

Also, I used 'vUSB Hasp HL' in UniDumpToReg to generate my reg file.

I should note that even the uninstall.bat hangs (blank cmd screens). I am unable to do anything with the vusb emulator at this point - even after I reboot.

I did manage to get the emulator to run an install on the WinXP system today, but I was having trouble installing the virtual usb device because I was having trouble with my hasp drivers for some reason - and I eventually had to reformat the hard drive. This occurred after I tried to install the latest Hasp driver package and the Hasp driver install process would not complete (it would only hang at the end); so I had to do another forced reboot. Unfortunately, I was unable to load windows after this forced reboot. Also, I was unable to do a non-destructive reformat - which was quite unfortunate.

Now I have a fresh install of WinXP Pro, and I will try again with a revised reg file.

Thanks.

UPDATE: After reformatting the WinXP pro system and reinstalling XP pro, I have managed to get the emulator working as before. (EVERYTHING WORKS, BUT SOME THINGS ARE VERY SLOW TO PROCESS).

It seems that my only problem now, is getting the program to function properly (at full speed).

I attempted to revised the reg file, but the changes prohibited the program from starting, so I reverted back to my original reg file (the one listed above). I am still doing something wrong with my reg file, it seems...

I'll continue to research it.

Thanks.

Git
09-09-2009, 05:45 AM
I think you should have a good check for malware, rootkits, etc. Also look at Task manager - what is your % CPU usage?

In general, it is not much use posting half a reg file. If it is big, zip it up, upload to a file share and post the link here.

Git

GNIREENIGNE
09-09-2009, 07:04 AM
Git-

Thank you for your comments.

CPU usage is normal; made sure to check that as program was running.
Malware shouldn't be causing the problem - as I just wiped the entire drive clean and installed a legitimate copy of XP pro (and I see the same performance from the protected software as I did prior to reformat ----- slow).

Yes, I wasn't able to post the entire reg file due to too many characters.

Made two reg files that work (the protected software runs slowly on both). One reg file was made with UniDumpToReg v1.1b5 PB with vUSB Hasp HL scheme. The other reg file was made with Tyrus' Hasp HL prog v1.1 [public] 2007 and converter.

The hasp.dmp and hhl_mem.dmp files were generated with H5dmp.

I have replaced a few lines of the reg code with 'XXX' etc. - I have also renamed them accordingly:

Link removed.

Anyway, do you think this particular emulator could be the problem? Or, perhaps, the .sys, or devcon file(s)/version(s)?

Thanks again.
-G


UPDATE: It seems that I am unable to uninstall the Chingachguk & Denger2k driver for the Virtual USB Bus Enumerator. I have even tried uninstalling it via Device Manager. Everything I do - be it uninstall driver, update and/or rollback driver or disable device, my computer just freezes up. Now, I am unable to run the emulator again. (Note: this is on a WinXP pro system).
I am unable to uninstall this device, even if I run Safe Mode as administrator. Also, each time I try anything with this device, and my computer freezes up, I have to 'end task' - and when I try to reboot, I have to do a 'forced reboot' every time.

The same thing happens on my Vista system - only worse (as the cmd screens are blank, and nothing happens).

Thanks.


UPDATE: I finally managed to get it uninstalled after several reboots and deleting some registry values etc. etc.

Now, I am back at trying to figure out why my protected SW is running slower than it should.

Thanks.

Git
09-09-2009, 02:04 PM
Hard to see what is hapenning with all those XX's everywhere, but the registry format is wrong ion both cases. There should be only 1 QTable and 1 ATable entry, with a new Q/A pair on each line. Lines are separated by ,/

However, if that doesn't fix your speed problem then it may be the built in 40mS delay which is called often in versions of that emulator I have looked at. My suggestion would be to try MultiKey V18.0.3. You will have to change your reg file format, but it is all detailed in the manual.

Git

GNIREENIGNE
09-09-2009, 07:28 PM
Git-

Thank you for taking the time to look at what I am doing - I really appreciate it.

I will definitely try out your suggestions and post back here with the results as soon as I know something.

Thanks.
-G


UPDATE: So far, changing the reg entries for Q/A Tables have not resolved the problem. I have written them in the following format - per your suggestion (emulation still works, however the SW is still slow):

"QTable"=hex:\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
"ATable"=hex:\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\
XX,XX,XX,XX,XX,XX,XX,XX\

I can only assume that this is what you meant. Of course, I replaced the hex code with 'X' for public view. (If you need to see what is going on in the Q/A tables, let me know - I can send you the actual reg file).

I have Multikey 18.0.3 now, and I am looking it over. It seems that the reg examples that are provided do not include the Hasp HL Time (specifically). I don't know that this makes much of a difference, however.
I have looked over the manual, and I am a bit confused with regard to the Q/A Tables. I will continue to search and see if I can find a good example or explanation with regard to the Q/A Tables.

Once I figure out how to properly input the Q/A Tables in to the reg file, I will be able to test it.

I'll keep you posted.

Thanks.


UPDATE: I am unable to find any information regarding this particular hasp and integrating the E/DTables in to the reg file for Multikey. This is an 'example' of my Q/A information that was acquired via Toro (the Q/A responses are written similarly - I just wrote over them for easier reading):

Hasp In:> HaspEncrypt Length=8
Data:
00 00 00 00 00 00 00 00
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
11 11 11 11 11 11 11 11

Hasp In:> HaspEncrypt Length=8
Data:
11 11 11 11 11 11 11 11
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
22 22 22 22 22 22 22 22

Hasp In:> HaspEncrypt Length=8
Data:
22 22 22 22 22 22 22 22
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
33 33 33 33 33 33 33 33

Hasp In:> HaspEncrypt Length=8
Data:
33 33 33 33 33 33 33 33
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
44 44 44 44 44 44 44 44

Hasp In:> HaspEncrypt Length=8
Data:
44 44 44 44 44 44 44 44
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
55 55 55 55 55 55 55 55

Hasp In:> HaspEncrypt Length=8
Data:
55 55 55 55 55 55 55 55
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
66 66 66 66 66 66 66 66

Hasp In:> HaspEncrypt Length=8
Data:
66 66 66 66 66 66 66 66
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
77 77 77 77 77 77 77 77

Hasp In:> HaspEncrypt Length=8
Data:
77 77 77 77 77 77 77 77
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
88 88 88 88 88 88 88 88

Hasp In:> HaspDecrypt Length=8
Data:
88 88 88 88 88 88 88 88
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
77 77 77 77 77 77 77 77

Hasp In:> HaspDecrypt Length=8
Data:
77 77 77 77 77 77 77 77
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
66 66 66 66 66 66 66 66

Hasp In:> HaspDecrypt Length=8
Data:
66 66 66 66 66 66 66 66
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
55 55 55 55 55 55 55 55

Hasp In:> HaspDecrypt Length=8
Data:
55 55 55 55 55 55 55 55
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
44 44 44 44 44 44 44 44

Hasp In:> HaspDecrypt Length=8
Data:
44 44 44 44 44 44 44 44
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
33 33 33 33 33 33 33 33

Hasp In:> HaspDecrypt Length=8
Data:
33 33 33 33 33 33 33 33
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
22 22 22 22 22 22 22 22

Hasp In:> HaspDecrypt Length=8
Data:
22 22 22 22 22 22 22 22
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
11 11 11 11 11 11 11 11

Hasp In:> HaspDecrypt Length=8
Data:
11 11 11 11 11 11 11 11
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
00 00 00 00 00 00 00 00


Assuming that my E/D table will need to use the above; should I be setting up my E/D table for multikey like this:

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\DTable];
"10:0000000000000000" = hex: 11,11,11,11,11,11,11,11
"20:1111111111111111" = hex: 22,22,22,22,22,22,22,22
"30:2222222222222222" = hex: 33,33,33,33,33,33,33,33
"40:3333333333333333" = hex: 44,44,44,44,44,44,44,44
"50:4444444444444444" = hex: 55,55,55,55,55,55,55,55
"60:5555555555555555" = hex: 66,66,66,66,66,66,66,66
"70:6666666666666666" = hex: 77,77,77,77,77,77,77,77
"80:7777777777777777" = hex: 88,88,88,88,88,88,88,88
"90:8888888888888888" = hex: 77,77,77,77,77,77,77,77
"100:7777777777777777" = hex: 66,66,66,66,66,66,66,66
"110:6666666666666666" = hex: 55,55,55,55,55,55,55,55
"120:5555555555555555" = hex: 44,44,44,44,44,44,44,44
"130:4444444444444444" = hex: 33,33,33,33,33,33,33,33
"140:3333333333333333" = hex: 22,22,22,22,22,22,22,22
"150:2222222222222222" = hex: 11,11,11,11,11,11,11,11
"160:1111111111111111" = hex: 00,00,00,00,00,00,00,00

That doesn't seem correct...
I'm totally lost.

Git
09-10-2009, 06:37 AM
You're not totally lost, you nearly have it, but you can't just go playing with the order of Q/R pairs, they must be kept in order.

Take this entry :

Hasp In:> HaspEncrypt Length=8
Data:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11

Notice it says HaspEncrypt, so it belongs in the ETable entries :

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\ETable]
"10:00000000000000000000000000000000" = hex:11,11,11,11,11,11,11,11,11,11,11,11,11,11,11,1 1

The '10' at the start is the length of the query in hexadecimal. 10 hex = 16 decimal, so there are 16 bytes - I have increased the size of the log entry to match what you are actually seeing :). That number at the start will not increase like an index, it will always show the length of that specific Q/R pair, and it will *always* be 10, 20 or 30. The input Data is on the left as one long string and the Response data on the right, separated by commas.

Now look at this entry :

Hasp In:> HaspDecrypt Length=8
Data:
44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44
Hasp Out:> HaspDecrypt Status=0 (0x0)
Response:
33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33

It says HaspDecrypt, so it belongs in the DTable section :

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\DTable]
"10:44444444444444444444444444444444" = hex:33,33,33,33,33,33,33,33,33,33,33,33,33,33,33,3 3

So HaspDecrypt entry in log -> 1 line under DTable section in .reg file
So HaspEncrypt entry in log -> 1 line under ETable section in .reg file

Be careful of the syntax, registry files are a bit picky. You had a space between hex: and the following numbers, that could cause it to silently fail to import that line into the registry. Same with line endings - you can split a command over as many lines as you like, but you must separate the lines with a \ at the end (but NOT at the end of the last line of the command).

Try it from there and report back.

Git

GNIREENIGNE
09-10-2009, 06:48 AM
The '10' at the start is the length of the query in hexadecimal. 10 hex = 16 decimal, so there are 16 bytes - I have increased the size of the log entry to match what you are actually seeing.

But I don't have 16 bytes. I only have 8 - as I have shown:

Hasp In:> HaspEncrypt Length=8
Data:
00 00 00 00 00 00 00 00
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
11 11 11 11 11 11 11 11

What then?


-Thank you for the explanation. Here is what I have so far - now:

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\ETable]
"10:0000000000000000" = hex: 11,11,11,11,11,11,11,11
"10:1111111111111111" = hex: 22,22,22,22,22,22,22,22
"10:2222222222222222" = hex: 33,33,33,33,33,33,33,33
"10:3333333333333333" = hex: 44,44,44,44,44,44,44,44
"10:4444444444444444" = hex: 55,55,55,55,55,55,55,55
"10:5555555555555555" = hex: 66,66,66,66,66,66,66,66
"10:6666666666666666" = hex: 77,77,77,77,77,77,77,77
"10:7777777777777777" = hex: 88,88,88,88,88,88,88,88

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\DTable]
"10:8888888888888888" = hex: 77,77,77,77,77,77,77,77
"10:7777777777777777" = hex: 66,66,66,66,66,66,66,66
"10:6666666666666666" = hex: 55,55,55,55,55,55,55,55
"10:5555555555555555" = hex: 44,44,44,44,44,44,44,44
"10:4444444444444444" = hex: 33,33,33,33,33,33,33,33
"10:3333333333333333" = hex: 22,22,22,22,22,22,22,22
"10:2222222222222222" = hex: 11,11,11,11,11,11,11,11
"10:1111111111111111" = hex: 00,00,00,00,00,00,00,00


Yes, for some reason, if I don't enclose my text/post in code, the forum software will add a space in some places...



UPDATE: I was thinking...did you mean;

If I have, say, this:

Hasp In:> HaspEncrypt Length=8
Data:
0A 0A 0A 0A 0B 0B 0B 0B
Hasp Out:> HaspEncrypt Status=0 (0x0)
Response:
1A 1A 1A 1A 1B 1B 1B 1B

I can write it like this:

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiK ey\Dumps\xxxxxxxx\ETable]
"10:0A0A0A0A0B0B0B0B0A0A0A0A0B0B0B0B" = hex:1A,1A,1A,1A,1B,1B,1B,1B,1A,1A,1A,1A,1B,1B,1B,1 B


...In other words, just double the entries?

Git
09-10-2009, 02:23 PM
NONONO!!!

Ah..... the log actually does use the word HaspEncrypt and not hl_encrypt?. Which logger are you using?. Those function calls (HaspEncrypt and HaspDecrypt) have nothing to do with the ETable and DTable. ETable and DTable are used with the data in hl_encrypt and hl_decrypt calls. Sorry if I have misled you, I assumed you had just paraphrased the logger output, I didn't realise it was verbatim (and different to the format I am used to).

Look through the log for calls to hl_encrypt and hl_decrypt with data size of 16, 32 or 48 bytes. Those are the calls that go into DTable and ETable.

Unfortunately, by disguising your reg files so heavily and not uploading a dump, we are very limited in the help we can give.

Git

GNIREENIGNE
09-10-2009, 03:33 PM
Git-

No worries, I'm just appreciative of the help. These mistakes occur because I don't know what I'm doing, really. That's not your fault.

After reading your last post, I took another look at my log files. First of all, I used Toro. Secondly, I never really got Toro monitor to run successfully - except, maybe once. Even then, I am unsure that it actually ran successfully. However, it still generated a log file.

With that information, I got to thinking...

I have no HL_ENCRYPT HL_DECRYPT listings in my log file. Also, when I plug in my hasp, most of the time, Hasp HL device doesn't even install. And the SW that I run performs just fine with only these two items installed:

1. Aladdin usb key
2. Aladdin hasp key
(no Aladdin hasp hl key is installed. Sometimes it will install, but my program runs with or without it -- i.e. not needed).

So that got me thinking...

...maybe I don't even need the E/D tables...
...so I created a reg file using the hasp4-time example and left out all Q/A and E/D tables.

I ran multikey and the software opens!

Unfortunately, however, the SW is still running slowly!

When you made mention of a 40ms delay, that makes perfect sense with what I am seeing. For example, if I open a new window, it seems normal (i.e. fast). However, if I do something that requires a bunch of quick commands to the SW, everything works slowly.

So, I think what I will do now, is look for a different monitoring software and see if I can get a better log file to work with.

This doesn't make sense. Why would my program open and function properly - yet, just not at full speed? The emulators that are available are unable to emulate my SW, but can perfectly emulate everyone else's? -I find that hard to believe.

If I have not installed the absolute latest driver available via the Aladdin website, do you think that would be causing this problem?

I'll continue to investigate the problem and try out different scenarios.

I'll keep you posted.

Thanks a lot for your help.
-G



UPDATE: By the way, I also have LMTOOLS/FlexLM v11.xxxx that manages the license for the software - would that make any difference?



UPDATE: I ran HaspLoger v1.71 today.

I managed to get the program to see my hasp and read from it as I ran my SW. However, I was only able to do this once. After my first run, I have yet to get the program to see the hasp again. Now, once I run HaspLoger, I get these two errors:

Error loading (InstallDriverUSB): HLOGGERUSBLINK
(C:\Windows\system32\drivers\GiA_HlogUSB.sys): 1072

Error loading: HLOGGERUSBLINK (C:\Users\XXX\Desktop\New
Folder\GiA_HlogUSB.sys): 1072

-Yes, my USBHASP is plugged in.
Of course, I am running this on Vista32, and the program isn't made for that, however, I was able to get it to run the first time...

I was able to generate a log file with HaspLoger (on my first run). Unfortunately, after searching for the following text in the output.log file: crypt :no results were found.

If my software can run without providing an E/D table, I wonder if using a different dumper will work? I am not very hopeful at this point.

BTW - correction; my software runs slower in EVERYTHING I do - even opening new menus/windows.

I'll continue to keep you posted.
-G


UPDATE: I updated the hasp drivers to the newest available version.



UPDATE: For some reason, I was able to get a dump converted to dng using HaspHL2007 (although I had tried to do this initially, and failed). Unfortunately, although the license was installed and said: full license :The protected SW wouldn't run.

I also tried to get a dump from another program (dump2all via sporaw webpage) but I couldn't get the dump program to run.

I installed an older version of LMTOOLS/FLexLM - to no avail (same - slow performance).


...I'm running out of ideas. Do you have any?
-G

giuseppe07
01-01-2010, 08:27 PM
please send me a link to download Chingachguk & Denger2k Emulator

Git
01-02-2010, 07:30 AM
No. Use the Search to find it yourself and stop being so lazy.

Git

SonofabiT
11-25-2010, 11:45 PM
@ all - I have used 32 bit Windows XP. After trying to install & uninstall several multikey & vusbbus release i have got the following problems :
>. I could not install, remove, restart the multikey or vusbBus emulator anymore.
>. Windows xp x86 could not be shutdown & restart normaly.
>. The Device Manager could no recognize any hasp dongle (emul) anymore.
>. Deal with vusb-based emulator, The Device Manager recognize this kind of device :
http://img257.imageshack.us/img257/6213/errortt.jpg

I disable the "system restore" of my windows xp so i could not restore my system to the last working system. For rest, i don't want to re-format my hdd & re-install my windows xp.

Could anyone please directme how to solve my problem ?

Klopschik
11-26-2010, 06:31 AM
Step 1: Remove Hidden Devices
===========================================
To get rid of that unwanted driver, device, or service:
1) Open the “Start” menu and choose “Run…”
2) Type in “cmd” (without the quotes) and click “ok”.
3) At the cmd prompt, type in “set devmgr_show_nonpresent_devices=1″ (without the quotes) and press enter. (Note that nothing seems to happen–this is ok. We are actually setting an environment variable which is going to help us to see hidden devices)
4) On the next cmd prompt line, type in “devmgmt.msc” (without the quotes) and press enter. This will launch the Windows Device Manager Console.
5) In the Device Manager Console, from the “View” menu, select “Show Hidden Devices”.

Now, as you expand the different drivers and devices with click on "+" in device manager you will see not only the items that Windows currently detects as installed on your pc (these are the usual items displayed), but you will also see drivers, devices, and services which have been loaded in the past but were not uninstalled or are not currently started. You can find your offending device, right-click, and choose “uninstall” to remove it from the system completely.

Be careful though; you should note that non-loaded devices, drivers, and services are “grayed” out, but that doesn’t necessarily mean that you should delete all of them. Only remove items you know you don’t need.

Step 2: Remove all oem*.inf files
===========================================
1. Click start and click run then under the run line type in the command "cmd" (without the quotation marks)

2. In the command line, type in the following (without the quotes) and press enter after each command:

"cd \windows\inf"
"ren infcache.1 *.old"
"ren oem*.inf *.old"
"del C:\windows\setupapi.log"
"exit"

Step 3: Removing all entries under HKEY_LOCAL_MACHINE/Enum/USB that start with VID using REGEDIT.
===========================================
Removing the VID entries from the registry will cause them to be redetected at restart.

CAUTION: If you have a USB keyboard, mouse, scanners, and other things you know are working, do not remove the VID entry for these devices, otherwise, Windows may not restart correctly.

1. Click Start and click Run. Type regedit and click OK. The Registry Editor window will open.

2. Go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\U SB.

3. Highlight and delete all the VID_.... entries for usb devices that you cannot identify. Remember not to delete the entries mentioned above.

You may not have permssion to delete keys, do the following.
Permissions may be set allowing the deletion of the VID_ entries by following the steps below:

a) Right-click the key to be deleted, and then click Permissions. The VID_... Permissions window will open.
b) With Everyone highlighted in the Group or User name section, select Full Control in the Permissions section.
c) Click Apply, and then click OK.

5. Restart your compuer.

Good luck!

SonofabiT
11-26-2010, 11:37 PM
@ Klopschik - Thank's you very much.
Why we should backup all oem.inf to the old ones?

Would it enought if we use Snow Panther's infclean utility ?
C:\temp>infclean.exe
* Virtual USB INF/PNF cleaner 0.1 (C) 2008 by Snow Panther *

* Found C:\WINDOWS\INF\OEM4.INF - delete [Y/N]? y
* Found C:\WINDOWS\INF\OEM4.PNF - delete [Y/N]?

CAUTION: If you have a USB keyboard, mouse, scanners, and other things you know are working, do not remove the VID entry for these devices, otherwise, Windows may not restart correctly.
Preventing any mistakes, i 've used nirsoft's USBDeview utilitiy. Simply right click the the device that we would to remove & select "Open In Regedit". :)

http://img121.imageshack.us/img121/2655/rmvdev.jpg

Once again Thank's for your usefull post. Following your assist, My Problem solved. :)