Answered by:
sppsvc cannot start: Error 5

Question
-
I am having terrible trouble with activation. All was fine until about 4 days ago when my installation decided to say Not Genuine, software counterfeiting and all. Needless to say I didn't pirate this; this came on a refurbished computer with the official Refurbisher's license.
I think the root of my problem is sppsvc. Whenever I try to start it it gives me an Error 5. I've tried to take ownership of it but all my attempts have failed.
Here's my MGDIAG if that will be useful.
Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0x8004FE21 Cached Online Validation Code: N/A, hr = 0xc0000022 Windows Product Key: *****-*****-8W6M4-BYF7X-DD4T9 Windows Product Key Hash: WWa3cLscrctQ+qGjE9nAm2ihNcI= Windows Product ID: 00371-OEM-0635392-00352 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.1.7601.2.00010100.1.0.048 ID: {9A28C9A6-B165-466E-A11A-EC0410865A59}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Professional Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.140303-2144 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{9A28C9A6-B165-466E-A11A-EC0410865A59}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DD4T9</PKey><PID>00371-OEM-0635392-00352</PID><PIDType>3</PIDType><SID>S-1-5-21-1828422288-1670685776-2685436516</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3626FAU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6QET64WW (1.34 )</Version><SMBIOSVersion major="2" minor="6"/><Date>20110224000000.000000+000</Date></BIOS><HWID>3BDB3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-6Q </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text. Error: 0x80070426 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: N/A HealthStatus: 0x0001000000000000 Event Time Stamp: 9:1:2014 21:37 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: Tampered Service: sppsvc HWID Data--> HWID Hash Current: NAAAAAEAAQABAAEAAQACAAAABAABAAEAln2Ehk40Ht7QsxDi3ohc4RB12pqECjZxznBcXQ== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes Windows marker version: 0x20001 OEMID and OEMTableID Consistent: yes BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC LENOVO TP-6Q FACP LENOVO TP-6Q HPET LENOVO TP-6Q BOOT LENOVO TP-6Q MCFG LENOVO TP-6Q SSDT LENOVO TP-6Q ECDT LENOVO TP-6Q ASF! LENOVO TP-6Q SLIC LENOVO TP-6Q SSDT LENOVO TP-6Q TCPA PTL CRESTLN SSDT LENOVO TP-6Q SSDT LENOVO TP-6Q SSDT LENOVO TP-6Q
- Edited by ndm_13 Wednesday, September 3, 2014 9:39 PM
Tuesday, September 2, 2014 1:57 PM
Answers
-
..in which case, the only real option is to back up your data, check you have all your installers, and do a clean install. :(
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Noel D PatonModerator Sunday, September 21, 2014 9:16 AM
- Marked as answer by Noel D PatonModerator Sunday, September 28, 2014 9:07 AM
Sunday, September 14, 2014 7:45 AMModerator
All replies
-
(Have you EVER used Norton software on this machine?)
Please run the following commands, and post the results.
REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC
They may show something
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Wednesday, September 3, 2014 7:07 AMModerator -
Thanks for the response. And no, the only security software on here is Microsoft Security Essentials.
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr DisplayName REG_SZ Security Processor Loader Driver ErrorControl REG_DWORD 0x3 Start REG_DWORD 0x0 Type REG_DWORD 0x1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum 0 REG_SZ Root\LEGACY_SPLDR\0000 Count REG_DWORD 0x1 NextInstance REG_DWORD 0x1 C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL DR /S HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR NextInstance REG_DWORD 0x1 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000 Service REG_SZ spldr Legacy REG_DWORD 0x1 ConfigFlags REG_DWORD 0x400 Class REG_SZ LegacyDriver ClassGUID REG_SZ {8ECC055D-047F-11D1-A537-0000F8753ED1} DeviceDesc REG_SZ Security Processor Loader Driver Capabilities REG_DWORD 0x0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control ActiveService REG_SZ spldr C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS VC ERROR: The system was unable to find the specified registry key or value. C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP SVC ERROR: The system was unable to find the specified registry key or value. C:\Windows\system32>
Wednesday, September 3, 2014 2:03 PM -
That all looks normal - in which case the problem may be the read-only status of critical system folders.
To correct this:-
Open Windows Explorer (Computer)
Navigate to the C: Drive
right-click on the C:\Windows folder
select Properties
Clear the 'blob' from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.
Click on Apply.
Make sure that the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.
Accept the Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.
Wait for it to finish - it could take a couple of minutes.
OK out, and exit Windows Explorer.
Reboot twice
(You'll notice that the 'blob' is back in the folder properties - this is normal, as read-only status cannot be assigned to folders, only files)
Post a new MGADiag report.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Wednesday, September 3, 2014 2:42 PMModerator -
Now MGADiag reports Genuine, but other system resources are still not behaving correctly.
Diagnostic Report (1.9.0019.0): ----------------------------------------- WGA Data--> Validation Status: Genuine Validation Code: 0 Cached Validation Code: N/A, hr = 0xc0000022 Windows Product Key: *****-*****-8W6M4-BYF7X-DD4T9 Windows Product Key Hash: WWa3cLscrctQ+qGjE9nAm2ihNcI= Windows Product ID: 00371-OEM-0635392-00352 Windows Product ID Type: 3 Windows License Type: OEM System Builder Windows OS version: 6.1.7601.2.00010100.1.0.048 ID: {9A28C9A6-B165-466E-A11A-EC0410865A59}(3) Is Admin: Yes TestCab: 0x0 WGA Version: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Professional Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.140303-2144 TTS Error: Validation Diagnostic: Resolution Status: N/A WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 WGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{9A28C9A6-B165-466E-A11A-EC0410865A59}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DD4T9</PKey><PID>00371-OEM-0635392-00352</PID><PIDType>3</PIDType><SID>S-1-5-21-1828422288-1670685776-2685436516</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3626FAU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6QET64WW (1.34 )</Version><SMBIOSVersion major="2" minor="6"/><Date>20110224000000.000000+000</Date></BIOS><HWID>3BDB3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-6Q </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text. Error: 0x80070426 Windows Activation Technologies--> HrOffline: 0x8004FE21 HrOnline: 0x00000000 HealthStatus: 0x0001000000000000 Event Time Stamp: 9:3:2014 15:06 WAT Activex: Registered WAT Admin Service: Registered HWID Data--> HWID Hash Current: NAAAAAEAAQABAAEAAQACAAAABAABAAEAln2Ehk40Ht7QsxDi3ohc4RB12pqECjZxznBcXQ== OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes Windows marker version: 0x20001 OEMID and OEMTableID Consistent: yes BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC LENOVO TP-6Q FACP LENOVO TP-6Q HPET LENOVO TP-6Q BOOT LENOVO TP-6Q MCFG LENOVO TP-6Q SSDT LENOVO TP-6Q ECDT LENOVO TP-6Q ASF! LENOVO TP-6Q SLIC LENOVO TP-6Q SSDT LENOVO TP-6Q TCPA PTL CRESTLN SSDT LENOVO TP-6Q SSDT LENOVO TP-6Q SSDT LENOVO TP-6Q
Running 'net start sppsvc' from Elevated Command prompt still gives me the Error 5. Windows Update doesn't check for updates (Code C0000022), my background still cuts out to black every so often, legitcheck.hta reports Not Genuine, and Windows Activation gives me Interface Unknown (Code: 0xC0020012).
Wednesday, September 3, 2014 7:14 PM -
You still have a major problem with WGA.
Licensing Data--> On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text. Error: 0x80070426
This looks to me to be the result of a malware infestation - or the injudicious use of some kind of 'System Optimizer' software.
Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM Premium' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.
Delete everything it finds
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Wednesday, September 3, 2014 7:27 PMModerator -
I downloaded and scanned. It detected 5 not-installed PUPs from old Setup files (tacked onto Virtual CloneDrive, CamStudio, and ImgBurn).
Still can't use Windows Update. sppsvc still won't start. And I haven't used any "System Optimizer". I haven't even gotten CCleaner on here yet.
Wednesday, September 3, 2014 9:20 PM -
Also ran Spybot S&D, which only came up with cookies and Most Recent lists.Wednesday, September 3, 2014 9:48 PM
-
Hmm - seems this error can be cause by permissions problems as well....
Please open an Elevated Command Prompt, and run the following commands,..
ICACLS C:\Windows\System32\en-US\winresume.exe.mui ICACLS C:\Windows\System32\en-US ICACLS C:\Windows\System32 ICACLS C:\Windows ICACLS C:\Windows\System32\sppsvc.exe
post the results..
Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Sunday, September 7, 2014 9:48 AMModerator -
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>ICACLS C:\Windows\System32\en-US\winresume.exe.mui C:\Windows\System32\en-US\winresume.exe.mui NT SERVICE\TrustedInstaller:(F) BUILTIN\Administrators:(RX) NT AUTHORITY\SYSTEM:(RX) BUILTIN\Users:(RX) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>ICACLS C:\Windows\System32\en-US C:\Windows\System32\en-US NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(CI)(IO)(F) NT AUTHORITY\SYSTEM:(M) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) BUILTIN\Administrators:(M) BUILTIN\Administrators:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) CREATOR OWNER:(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>ICACLS C:\Windows\System32 C:\Windows\System32 NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(CI)(IO)(F) NT AUTHORITY\SYSTEM:(M) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) BUILTIN\Administrators:(M) BUILTIN\Administrators:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) CREATOR OWNER:(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>ICACLS C:\Windows C:\Windows NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(CI)(IO)(F) NT AUTHORITY\SYSTEM:(M) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) BUILTIN\Administrators:(M) BUILTIN\Administrators:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) CREATOR OWNER:(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>ICACLS C:\Windows\System32\sppsvc.exe C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F) BUILTIN\Administrators:(RX) NT AUTHORITY\SYSTEM:(RX) BUILTIN\Users:(RX) Successfully processed 1 files; Failed processing 0 files
Monday, September 8, 2014 1:36 PM -
All of that looks normal enough to me :(
That being the case, I can only assume that there are deep problems in the installation - and recommend a repair install.
Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html
- and they should help you get through it (it's not as difficult as it looks!)
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. Monday, September 8, 2014 7:22 PMModerator -
I've tried to run the repair install a couple times, but it keeps failing and restoring my previous Windows installation. I can't remember the error offhand, but I'll try again this evening and post it.Tuesday, September 9, 2014 2:01 PM
-
..in which case, the only real option is to back up your data, check you have all your installers, and do a clean install. :(
Noel Paton | Nil Carborundum Illegitemi CrashFixPC | The Three-toed Sloth No - I do not work for Microsoft, or any of its contractors. - Proposed as answer by Noel D PatonModerator Sunday, September 21, 2014 9:16 AM
- Marked as answer by Noel D PatonModerator Sunday, September 28, 2014 9:07 AM
Sunday, September 14, 2014 7:45 AMModerator