Posted 08 March 2011 - 04:03 PM
I've been working on this for a few days, and can't fix it.
I had the "google-redirect" rootkit on my computer, and I managed to remove it with the Kaspersky TDSS rootkit unhooker. In doing so, it removed the corrupted file and didnt replace it.
The file was swenum.sys, one of the two files that makes the windows plug and plug software enumerator work. So this left me without sound. It showed up as "no audio device" in control panel.
I tried to reinstall the PnP enumerator by replacing the machine.inf file and removing line 20 (? or 21, I'd have to look again). But anyways, this gave me a multiple copy of Pnp enumerator. So, I then tried to get rid of the duplicate entry by deleting it from the registry (using regedt32). Only, every time I try to do this, it won't stay gone. The system became pretty unstable whenever a program loaded that runs audio (opera, ie, etc.)
I also tried deleting the doubled up ghost entries (all the Kernel audio drivers) that show up in device manager, that didnt do anything, they came back each time I rebooted. I finally removed the HDaudio device altogether, that got rid of all the kernel audio errors, and created an error with my PCI device? The system is stable now, and running a lot faster (I took the opportunity to strip a bunch of junk from my startup).
My question is, does anyone know how to successfully remove a duplicate entry of PnP software enumerator? And, I can't figure out where to get the drivers for my PCI device!