locked
sppsvc cannot start: Error 5 RRS feed

  • Question

  • I am having terrible trouble with activation.  All was fine until about 4 days ago when my installation decided to say Not Genuine, software counterfeiting and all.  Needless to say I didn't pirate this; this came on a refurbished computer with the official Refurbisher's license.

    I think the root of my problem is sppsvc.  Whenever I try to start it it gives me an Error 5.  I've tried to take ownership of it but all my attempts have failed.

    Here's my MGDIAG if that will be useful.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    
    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-8W6M4-BYF7X-DD4T9
    Windows Product Key Hash: WWa3cLscrctQ+qGjE9nAm2ihNcI=
    Windows Product ID: 00371-OEM-0635392-00352
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {9A28C9A6-B165-466E-A11A-EC0410865A59}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9A28C9A6-B165-466E-A11A-EC0410865A59}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DD4T9</PKey><PID>00371-OEM-0635392-00352</PID><PIDType>3</PIDType><SID>S-1-5-21-1828422288-1670685776-2685436516</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3626FAU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6QET64WW
     (1.34 )</Version><SMBIOSVersion major="2" minor="6"/><Date>20110224000000.000000+000</Date></BIOS><HWID>3BDB3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern
     Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-6Q
       </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 
    
    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 9:1:2014 21:37
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc
    
    
    HWID Data-->
    HWID Hash Current: NAAAAAEAAQABAAEAAQACAAAABAABAAEAln2Ehk40Ht7QsxDi3ohc4RB12pqECjZxznBcXQ==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name OEMID Value
    OEMTableID Value
      APIC LENOVO
    TP-6Q   
      FACP LENOVO
    TP-6Q   
      HPET LENOVO
    TP-6Q   
      BOOT LENOVO
    TP-6Q   
      MCFG LENOVO
    TP-6Q   
      SSDT LENOVO
    TP-6Q   
      ECDT LENOVO
    TP-6Q   
      ASF! LENOVO
    TP-6Q   
      SLIC LENOVO
    TP-6Q   
      SSDT LENOVO
    TP-6Q   
      TCPA PTL
    CRESTLN
      SSDT LENOVO
    TP-6Q   
      SSDT LENOVO
    TP-6Q   
      SSDT LENOVO
    TP-6Q   
    
    


    • Edited by ndm_13 Wednesday, September 3, 2014 9:39 PM
    Tuesday, September 2, 2014 1:57 PM

Answers

  • ..in which case, the only real option is to back up your data, check you have all your installers, and do a clean install. :(


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, September 14, 2014 7:45 AM
    Moderator

All replies

  • (Have you EVER used Norton software on this machine?)

    Please run the following commands, and post the results.

    REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC

    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

     They may show something

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, September 3, 2014 7:07 AM
    Moderator
  • Thanks for the response.  And no, the only security software on here is Microsoft Security Essentials.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
        DisplayName    REG_SZ    Security Processor Loader Driver
        ErrorControl    REG_DWORD    0x3
        Start    REG_DWORD    0x0
        Type    REG_DWORD    0x1
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
        0    REG_SZ    Root\LEGACY_SPLDR\0000
        Count    REG_DWORD    0x1
        NextInstance    REG_DWORD    0x1
    
    
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
    DR /S
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
        NextInstance    REG_DWORD    0x1
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
        Service    REG_SZ    spldr
        Legacy    REG_DWORD    0x1
        ConfigFlags    REG_DWORD    0x400
        Class    REG_SZ    LegacyDriver
        ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
        DeviceDesc    REG_SZ    Security Processor Loader Driver
        Capabilities    REG_DWORD    0x0
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
        ActiveService    REG_SZ    spldr
    
    
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
    VC
    ERROR: The system was unable to find the specified registry key or value.
    
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
    SVC
    ERROR: The system was unable to find the specified registry key or value.
    
    C:\Windows\system32>

    Wednesday, September 3, 2014 2:03 PM
  • That all looks normal - in which case the problem may be the read-only status of critical system folders.

    To correct this:-

    Open Windows Explorer (Computer)

    Navigate to the C: Drive

    right-click on the C:\Windows folder

    select Properties

    Clear the 'blob' from the 'Read-only (Only applies to files in folder)' box by clicking on it until it's plain white.

    Click on Apply.

    Make sure that the radio button for 'Apply changes to this folder, subfolders and files' is set, and click OK.

    Accept the Administrator prompt. After a couple of seconds, you'll be told there is an error - click on the 'Ignore all' button.

    Wait for it to finish - it could take a couple of minutes.

    OK out, and exit Windows Explorer.

    Reboot twice

    (You'll notice that the 'blob' is back in the folder properties - this is normal, as read-only status cannot be assigned to folders, only files)

    Post a new MGADiag report.



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, September 3, 2014 2:42 PM
    Moderator
  • Now MGADiag reports Genuine, but other system resources are still not behaving correctly.

    Diagnostic Report (1.9.0019.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Validation Code: 0
    
    Cached Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-8W6M4-BYF7X-DD4T9
    Windows Product Key Hash: WWa3cLscrctQ+qGjE9nAm2ihNcI=
    Windows Product ID: 00371-OEM-0635392-00352
    Windows Product ID Type: 3
    Windows License Type: OEM System Builder
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {9A28C9A6-B165-466E-A11A-EC0410865A59}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.140303-2144
    TTS Error: 
    Validation Diagnostic: 
    Resolution Status: N/A
    
    WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    
    WGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002
    
    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002
    
    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
    
    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed
    
    File Scan Data-->
    
    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{9A28C9A6-B165-466E-A11A-EC0410865A59}</UGUID><Version>1.9.0019.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-DD4T9</PKey><PID>00371-OEM-0635392-00352</PID><PIDType>3</PIDType><SID>S-1-5-21-1828422288-1670685776-2685436516</SID><SYSTEM><Manufacturer>LENOVO</Manufacturer><Model>3626FAU</Model></SYSTEM><BIOS><Manufacturer>LENOVO</Manufacturer><Version>6QET64WW (1.34 )</Version><SMBIOSVersion major="2" minor="6"/><Date>20110224000000.000000+000</Date></BIOS><HWID>3BDB3807018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-6Q   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
    
    Spsys.log Content: 0x80070002
    
    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 
    
    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: 0x00000000
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 9:3:2014 15:06
    WAT Activex: Registered
    WAT Admin Service: Registered
    
    HWID Data-->
    HWID Hash Current: NAAAAAEAAQABAAEAAQACAAAABAABAAEAln2Ehk40Ht7QsxDi3ohc4RB12pqECjZxznBcXQ==
    
    OEM Activation 1.0 Data-->
    N/A
    
    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information: 
      ACPI Table Name	OEMID Value	OEMTableID Value
      APIC			LENOVO		TP-6Q   
      FACP			LENOVO		TP-6Q   
      HPET			LENOVO		TP-6Q   
      BOOT			LENOVO		TP-6Q   
      MCFG			LENOVO		TP-6Q   
      SSDT			LENOVO		TP-6Q   
      ECDT			LENOVO		TP-6Q   
      ASF!			LENOVO		TP-6Q   
      SLIC			LENOVO		TP-6Q   
      SSDT			LENOVO		TP-6Q   
      TCPA			PTL		 CRESTLN
      SSDT			LENOVO		TP-6Q   
      SSDT			LENOVO		TP-6Q   
      SSDT			LENOVO		TP-6Q   
    
    

    Running 'net start sppsvc' from Elevated Command prompt still gives me the Error 5.  Windows Update doesn't check for updates (Code C0000022), my background still cuts out to black every so often, legitcheck.hta reports Not Genuine, and Windows Activation gives me Interface Unknown (Code: 0xC0020012).

    Wednesday, September 3, 2014 7:14 PM
  • You still have a major problem with WGA.

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426 
    
    

    This looks to me to be the result of a malware infestation - or the injudicious use of some kind of 'System Optimizer' software.

    Please download and install  Malwarebytes Anti-malware (free version) from  http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM Premium' at the end of the installation -  and update it, then run a full scan  in your main account, and Quick scans in any other user accounts.

    Delete everything it finds   


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Wednesday, September 3, 2014 7:27 PM
    Moderator
  • I downloaded and scanned.  It detected 5 not-installed PUPs from old Setup files (tacked onto Virtual CloneDrive, CamStudio, and ImgBurn).

    Still can't use Windows Update.  sppsvc still won't start.  And I haven't used any "System Optimizer".  I haven't even gotten CCleaner on here yet.

    Wednesday, September 3, 2014 9:20 PM
  • Also ran Spybot S&D, which only came up with cookies and Most Recent lists.
    Wednesday, September 3, 2014 9:48 PM
  • Hmm - seems this error can be cause by permissions problems as well....

    Please open an Elevated Command Prompt, and run the following commands,..

    ICACLS C:\Windows\System32\en-US\winresume.exe.mui
    ICACLS C:\Windows\System32\en-US
    ICACLS C:\Windows\System32
    ICACLS C:\Windows
    ICACLS C:\Windows\System32\sppsvc.exe
     

    post the results..

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, September 7, 2014 9:48 AM
    Moderator
  • Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    
    C:\Windows\system32>ICACLS C:\Windows\System32\en-US\winresume.exe.mui
    C:\Windows\System32\en-US\winresume.exe.mui NT SERVICE\TrustedInstaller:(F)
                                                BUILTIN\Administrators:(RX)
                                                NT AUTHORITY\SYSTEM:(RX)
                                                BUILTIN\Users:(RX)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>ICACLS C:\Windows\System32\en-US
    C:\Windows\System32\en-US NT SERVICE\TrustedInstaller:(F)
                              NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                              NT AUTHORITY\SYSTEM:(M)
                              NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                              BUILTIN\Administrators:(M)
                              BUILTIN\Administrators:(OI)(CI)(IO)(F)
                              BUILTIN\Users:(RX)
                              BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                              CREATOR OWNER:(OI)(CI)(IO)(F)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>ICACLS C:\Windows\System32
    C:\Windows\System32 NT SERVICE\TrustedInstaller:(F)
                        NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                        NT AUTHORITY\SYSTEM:(M)
                        NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                        BUILTIN\Administrators:(M)
                        BUILTIN\Administrators:(OI)(CI)(IO)(F)
                        BUILTIN\Users:(RX)
                        BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                        CREATOR OWNER:(OI)(CI)(IO)(F)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>ICACLS C:\Windows
    C:\Windows NT SERVICE\TrustedInstaller:(F)
               NT SERVICE\TrustedInstaller:(CI)(IO)(F)
               NT AUTHORITY\SYSTEM:(M)
               NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
               BUILTIN\Administrators:(M)
               BUILTIN\Administrators:(OI)(CI)(IO)(F)
               BUILTIN\Users:(RX)
               BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
               CREATOR OWNER:(OI)(CI)(IO)(F)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>ICACLS C:\Windows\System32\sppsvc.exe
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)
    
    Successfully processed 1 files; Failed processing 0 files
    

    Monday, September 8, 2014 1:36 PM
  • All of that looks normal enough to me :(

    That being the case, I can only assume that there are deep problems in the installation - and recommend a repair install.

    Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

    - and they should help you get through it (it's not as difficult as it looks!)



    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, September 8, 2014 7:22 PM
    Moderator
  • I've tried to run the repair install a couple times, but it keeps failing and restoring my previous Windows installation.  I can't remember the error offhand, but I'll try again this evening and post it.
    Tuesday, September 9, 2014 2:01 PM
  • ..in which case, the only real option is to back up your data, check you have all your installers, and do a clean install. :(


    Noel Paton | Nil Carborundum Illegitemi
    CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, September 14, 2014 7:45 AM
    Moderator