sppsvc cannot start: Error 5

All replies

• 

  

  0

  Sign in to vote

  (Have you EVER used Norton software on this machine?)

  Please run the following commands, and post the results.

  REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC

  REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

   They may show something

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, September 3, 2014 7:07 AM

  Moderator
• 

  

  0

  Sign in to vote

  Thanks for the response.  And no, the only security software on here is Microsoft Security Essentials.

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
      DisplayName    REG_SZ    Security Processor Loader Driver
      ErrorControl    REG_DWORD    0x3
      Start    REG_DWORD    0x0
      Type    REG_DWORD    0x1
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
      0    REG_SZ    Root\LEGACY_SPLDR\0000
      Count    REG_DWORD    0x1
      NextInstance    REG_DWORD    0x1
  
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
  DR /S
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
      NextInstance    REG_DWORD    0x1
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
      Service    REG_SZ    spldr
      Legacy    REG_DWORD    0x1
      ConfigFlags    REG_DWORD    0x400
      Class    REG_SZ    LegacyDriver
      ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
      DeviceDesc    REG_SZ    Security Processor Loader Driver
      Capabilities    REG_DWORD    0x0
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
      ActiveService    REG_SZ    spldr
  
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
  VC
  ERROR: The system was unable to find the specified registry key or value.
  
  C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
  SVC
  ERROR: The system was unable to find the specified registry key or value.
  
  C:\Windows\system32>

  
  

  Wednesday, September 3, 2014 2:03 PM
• 

  

  0

  Sign in to vote

  That all looks normal - in which case the problem may be the read-only status of critical system folders.

  To correct this:-

  Open Windows Explorer (Computer)

  Navigate to the C: Drive

  right-click on the C:\Windows folder

  select Properties

  Clear the 'blob' from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.

  Click on Apply.

  Make sure that the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.

  Accept the Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.

  Wait for it to finish - it could take a couple of minutes.

  OK out, and exit Windows Explorer.

  Reboot twice

  (You'll notice that the 'blob' is back in the folder properties - this is normal, as read-only status cannot be assigned to folders, only files)

  Post a new MGADiag report.

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, September 3, 2014 2:42 PM

  Moderator
• 

  

  0

  Sign in to vote

  Now MGADiag reports Genuine, but other system resources are still not behaving correctly.

  Diagnostic Report (1.9.0019.0):
  -----------------------------------------
  WGA Data-->
  Validation Status: Genuine
  Validation Code: 0
  
  Cached Validation Code: N/A, hr = 0xc0000022
  Windows Product Key: *****-*****-8W6M4-BYF7X-DD4T9
  Windows Product Key Hash: WWa3cLscrctQ+qGjE9nAm2ihNcI=
  Windows Product ID: 00371-OEM-0635392-00352
  Windows Product ID Type: 3
  Windows License Type: OEM System Builder
  Windows OS version: 6.1.7601.2.00010100.1.0.048
  ID: {9A28C9A6-B165-466E-A11A-EC0410865A59}(3)
  Is Admin: Yes
  TestCab: 0x0
  WGA Version: N/A, hr = 0x80070002
  Signed By: N/A, hr = 0x80070002
  Product Name: Windows 7 Professional
  Architecture: 0x00000009
  Build lab: 7601.win7sp1_gdr.140303-2144
  TTS Error: 
  Validation Diagnostic: 
  Resolution Status: N/A
  
  WgaER Data-->
  ThreatID(s): N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  
  WGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  File Exists: No
  Version: N/A, hr = 0x80070002
  WgaTray.exe Signed By: N/A, hr = 0x80070002
  WgaLogon.dll Signed By: N/A, hr = 0x80070002
  
  OGA Notifications Data-->
  Cached Result: N/A, hr = 0x80070002
  Version: N/A, hr = 0x80070002
  OGAExec.exe Signed By: N/A, hr = 0x80070002
  OGAAddin.dll Signed By: N/A, hr = 0x80070002
  
  OGA Data-->
  Office Status: 109 N/A
  OGA Version: N/A, 0x80070002
  Signed By: N/A, hr = 0x80070002
  Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
  
  Browser Data-->
  Proxy settings: N/A
  User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
  Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  Download signed ActiveX controls: Prompt
  Download unsigned ActiveX controls: Disabled
  Run ActiveX controls and plug-ins: Allowed
  Initialize and script ActiveX controls not marked as safe: Disabled
  Allow scripting of Internet Explorer Webbrowser control: Disabled
  Active scripting: Allowed
  Script ActiveX controls marked as safe for scripting: Allowed
  
  File Scan Data-->
  
  Other data-->
  Office Details: <GenuineResults><MachineData><UGUID>{9A28C9A6-B165-466E-A11A-EC0410865A59}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DD4T9</PKey><PID>00371-OEM-0635392-00352</PID><PIDType>3</PIDType><SID>S-1-5-21-1828422288-1670685776-2685436516</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3626FAU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6QET64WW (1.34 )</Version><SMBIOSVersion major="2" minor="6"/><Date>20110224000000.000000+000</Date></BIOS><HWID>3BDB3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-6Q   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
  
  Spsys.log Content: 0x80070002
  
  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
  Error: 0x80070426 
  
  Windows Activation Technologies-->
  HrOffline: 0x8004FE21
  HrOnline: 0x00000000
  HealthStatus: 0x0001000000000000
  Event Time Stamp: 9:3:2014 15:06
  WAT Activex: Registered
  WAT Admin Service: Registered
  
  HWID Data-->
  HWID Hash Current: NAAAAAEAAQABAAEAAQACAAAABAABAAEAln2Ehk40Ht7QsxDi3ohc4RB12pqECjZxznBcXQ==
  
  OEM Activation 1.0 Data-->
  N/A
  
  OEM Activation 2.0 Data-->
  BIOS valid for OA 2.0: yes
  Windows marker version: 0x20001
  OEMID and OEMTableID Consistent: yes
  BIOS Information: 
    ACPI Table Name	OEMID Value	OEMTableID Value
    APIC			LENOVO		TP-6Q   
    FACP			LENOVO		TP-6Q   
    HPET			LENOVO		TP-6Q   
    BOOT			LENOVO		TP-6Q   
    MCFG			LENOVO		TP-6Q   
    SSDT			LENOVO		TP-6Q   
    ECDT			LENOVO		TP-6Q   
    ASF!			LENOVO		TP-6Q   
    SLIC			LENOVO		TP-6Q   
    SSDT			LENOVO		TP-6Q   
    TCPA			PTL		 CRESTLN
    SSDT			LENOVO		TP-6Q   
    SSDT			LENOVO		TP-6Q   
    SSDT			LENOVO		TP-6Q   
  
  

  Running 'net start sppsvc' from Elevated Command prompt still gives me the Error 5.  Windows Update doesn't check for updates (Code C0000022), my background still cuts out to black every so often, legitcheck.hta reports Not Genuine, and Windows Activation gives me Interface Unknown (Code: 0xC0020012).

  Wednesday, September 3, 2014 7:14 PM
• 

  

  0

  Sign in to vote

  You still have a major problem with WGA.

  Licensing Data-->
  On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
  Error: 0x80070426 
  
  

  This looks to me to be the result of a malware infestation - or the injudicious use of some kind of 'System Optimizer' software.

  Please download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM Premium' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

  Delete everything it finds   

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Wednesday, September 3, 2014 7:27 PM

  Moderator
• 

  

  0

  Sign in to vote

  I downloaded and scanned.  It detected 5 not-installed PUPs from old Setup files (tacked onto Virtual CloneDrive, CamStudio, and ImgBurn).

  Still can't use Windows Update.  sppsvc still won't start.  And I haven't used any "System Optimizer".  I haven't even gotten CCleaner on here yet.

  Wednesday, September 3, 2014 9:20 PM
• 

  

  0

  Sign in to vote

  Also ran Spybot S&D, which only came up with cookies and Most Recent lists.

  Wednesday, September 3, 2014 9:48 PM
• 

  

  0

  Sign in to vote

  Hmm - seems this error can be cause by permissions problems as well....

  Please open an Elevated Command Prompt, and run the following commands,..

  ICACLS C:\Windows\System32\en-US\winresume.exe.mui
  ICACLS C:\Windows\System32\en-US
  ICACLS C:\Windows\System32
  ICACLS C:\Windows
  ICACLS C:\Windows\System32\sppsvc.exe
   

  
  

  post the results..

    Here are some instructions to make life easier :)

  1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

  2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

  3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Sunday, September 7, 2014 9:48 AM

  Moderator
• 

  

  0

  Sign in to vote

  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  
  C:\Windows\system32>ICACLS C:\Windows\System32\en-US\winresume.exe.mui
  C:\Windows\System32\en-US\winresume.exe.mui NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)
  
  Successfully processed 1 files; Failed processing 0 files
  
  C:\Windows\system32>ICACLS C:\Windows\System32\en-US
  C:\Windows\System32\en-US NT SERVICE\TrustedInstaller:(F)
                            NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                            NT AUTHORITY\SYSTEM:(M)
                            NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                            BUILTIN\Administrators:(M)
                            BUILTIN\Administrators:(OI)(CI)(IO)(F)
                            BUILTIN\Users:(RX)
                            BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                            CREATOR OWNER:(OI)(CI)(IO)(F)
  
  Successfully processed 1 files; Failed processing 0 files
  
  C:\Windows\system32>ICACLS C:\Windows\System32
  C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                      NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                      NT AUTHORITY\SYSTEM:(M)
                      NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                      BUILTIN\Administrators:(M)
                      BUILTIN\Administrators:(OI)(CI)(IO)(F)
                      BUILTIN\Users:(RX)
                      BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                      CREATOR OWNER:(OI)(CI)(IO)(F)
  
  Successfully processed 1 files; Failed processing 0 files
  
  C:\Windows\system32>ICACLS C:\Windows
  C:\Windows NT SERVICE\TrustedInstaller:(F)
             NT SERVICE\TrustedInstaller:(CI)(IO)(F)
             NT AUTHORITY\SYSTEM:(M)
             NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
             BUILTIN\Administrators:(M)
             BUILTIN\Administrators:(OI)(CI)(IO)(F)
             BUILTIN\Users:(RX)
             BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
             CREATOR OWNER:(OI)(CI)(IO)(F)
  
  Successfully processed 1 files; Failed processing 0 files
  
  C:\Windows\system32>ICACLS C:\Windows\System32\sppsvc.exe
  C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                 BUILTIN\Administrators:(RX)
                                 NT AUTHORITY\SYSTEM:(RX)
                                 BUILTIN\Users:(RX)
  
  Successfully processed 1 files; Failed processing 0 files
  

  
  

  Monday, September 8, 2014 1:36 PM
• 

  

  0

  Sign in to vote

  All of that looks normal enough to me :(

  That being the case, I can only assume that there are deep problems in the installation - and recommend a repair install.

  Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

  - and they should help you get through it (it's not as difficult as it looks!)

  
  

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  Monday, September 8, 2014 7:22 PM

  Moderator
• 

  

  0

  Sign in to vote

  I've tried to run the repair install a couple times, but it keeps failing and restoring my previous Windows installation.  I can't remember the error offhand, but I'll try again this evening and post it.

  Tuesday, September 9, 2014 2:01 PM
• 

  

  0

  Sign in to vote

  ..in which case, the only real option is to back up your data, check you have all your installers, and do a clean install. :(

  ---

  Noel Paton | Nil Carborundum Illegitemi

  CrashFixPC | The Three-toed Sloth

  No - I do not work for Microsoft, or any of its contractors.

  • Proposed as answer by Noel D PatonModerator Sunday, September 21, 2014 9:16 AM
  • Marked as answer by Noel D PatonModerator Sunday, September 28, 2014 9:07 AM

  Sunday, September 14, 2014 7:45 AM

  Moderator