Sign in
Microsoft.com
 
Microsoft
 
 
 

none
Windows 7 Validation Issue (Has worked for 2 years and this week it is not) RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Let me know what you all think!

    Thanks! Ron

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-YFBX6-QGWPC-XTF82
    Windows Product Key Hash: vjjwgOzNYesRUgK2xjRNmsWeWk8=
    Windows Product ID: 00371-618-2299751-85351
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Outlook 2007 - 100 Genuine
    Microsoft Office Standard 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XTF82</PKey><PID>00371-618-2299751-85351</PID><PIDType>5</PIDType><SID>S-1-5-21-3290562497-994334242-1542482041</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9700 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27    </Version><SMBIOSVersion major="2" minor="4"/><Date>20080111000000.000000+000</Date></BIOS><HWID>7BC03507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00E0-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Outlook 2007</Name><Ver>12</Ver><Val>6FC56FA7A3E7D86</Val><Hash>6xgvjrQk4rRhxbm8UccfDBWIPSw=</Hash><Pid>89458-707-1525087-63082</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>C29E1A8061E3710</Val><Hash>ocgfEWzOh0KxYpWHgmwSCoU9SJE=</Hash><Pid>81607-904-7568995-64478</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 2:21:2013 15:53
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAJJRiIL5ddhsGmJhgIL6ABLzjiMxMykQsptXI8YQ3IAJ4qg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            NVIDIA        MCP67-M
      SRAT            AMD           HAMMER  
      HPET            PTLTD         HPETTBL
      BOOT            PTLTD         $SBFTBL$
      MCFG            PTLTD           MCFG  
      TCPA            Phoeni        x      
      SSDT            PTLTD         POWERNOW
      SLIC            HPQOEM        SLIC-MPC

    Friday, February 22, 2013 12:36 AM
    |

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Noel - Thanks for all of you assistance.  I was able to figure out that it was a read-only issue with the windows directory.  I got that from another post of yours.

    Ron

    Sunday, February 24, 2013 3:11 AM
    |

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Additional information :

    Windows Validation Check
    Version: 1.9.12.5
    Log Created On: 1917_21-02-2013
    -----------------------

    Windows Information
    -----------------------
    Windows Version: Windows 7 Service Pack 1
    Windows Mode: Normal
    Systemroot Path: C:\Windows

    WVCheck's Auto Update Check
    -----------------------
    Auto-Update Option: Download updates and install them automatically.
    -----------------------
    Last Success Time for Update Detection: 2013-01-26 10:46:49
    Last Success Time for Update Download: 2013-02-21 22:56:25
    Last Success Time for Update Installation: 2013-02-21 23:28:27


    WVCheck's Registry Check Check
    -----------------------
    Antiwpa: Not Found
    -----------------------
    Chew7Hale: Not Found
    -----------------------


    WVCheck's File Dump
    -----------------------
    C:\Windows\System32\slwga.dll
    Size: 14336 bytes
    Creation; 8/6/2011 22:35:52
    Modification; 20/11/2010 7:21:24
    MD5; 19f75d71e4256f5113d64ce2bb66b838
    Matched: slwga.dll
    -----------------------
    C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_ff27e02604a90885\slwga.dll
    Size: 13824 bytes
    Creation; 13/7/2009 19:36:22
    Modification; 13/7/2009 21:16:15
    MD5; 01fe4bdd0b47a7d8bf34d78d2bc23ddb
    Matched: slwga.dll
    -----------------------
    C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_ff66c6b2047a22cd\slwga.dll
    Size: 14336 bytes
    Creation; 9/2/2011 8:50:12
    Modification; 21/12/2010 0:38:16
    MD5; 2008845b41d561fb77b77bbe0045099e
    Matched: slwga.dll
    -----------------------
    C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_ffc423831db91904\slwga.dll
    Size: 14336 bytes
    Creation; 9/2/2011 8:50:12
    Modification; 21/12/2010 0:29:6
    MD5; 2332de32759ebcc691850e092b2564a6
    Matched: slwga.dll
    -----------------------
    C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
    Size: 14336 bytes
    Creation; 8/6/2011 22:35:52
    Modification; 20/11/2010 7:21:24
    MD5; 19f75d71e4256f5113d64ce2bb66b838
    Matched: slwga.dll
    -----------------------


    WVCheck's Dir Dump
    -----------------------
    WVCheck found no known bad directories.


    WVCheck's Missing File Check
    -----------------------
    WVCheck found no missing Windows files.


    WVCheck's HOSTS File Check
    -----------------------
    WVCheck found no bad lines in the hosts file.


    WVCheck's MD5 Check
    EXPERIMENTAL!!
    -----------------------
    user32.dll - f1dd3acaee5e6b4bbc69bc6df75cef66


    -------- End of File, program close at 1935_21-02-2013 --------

    Friday, February 22, 2013 12:47 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the WVCheck :)

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Friday, February 22, 2013 9:15 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Link to CBS Log:

    https://skydrive.live.com/redir?resid=1BF3CA772330A554!107&authkey=!AOcl3_oPO5euCr0

    No errors noted on SFC scan.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0x8004FE21
    Cached Online Validation Code: N/A, hr = 0xc0000022
    Windows Product Key: *****-*****-YFBX6-QGWPC-XTF82
    Windows Product Key Hash: vjjwgOzNYesRUgK2xjRNmsWeWk8=
    Windows Product ID: 00371-618-2299751-85351
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.1.7601.2.00010100.1.0.048
    ID: {77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: 2.0.48.0
    OGAExec.exe Signed By: Microsoft
    OGAAddin.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    Microsoft Office Outlook 2007 - 100 Genuine
    Microsoft Office Standard 2007 - 100 Genuine
    OGA Version: Registered, 2.0.48.0
    Signed By: Microsoft
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XTF82</PKey><PID>00371-618-2299751-85351</PID><PIDType>5</PIDType><SID>S-1-5-21-3290562497-994334242-1542482041</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9700 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27    </Version><SMBIOSVersion major="2" minor="4"/><Date>20080111000000.000000+000</Date></BIOS><HWID>7BC03507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00E0-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Outlook 2007</Name><Ver>12</Ver><Val>6FC56FA7A3E7D86</Val><Hash>6xgvjrQk4rRhxbm8UccfDBWIPSw=</Hash><Pid>89458-707-1525087-63082</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>C29E1A8061E3710</Val><Hash>ocgfEWzOh0KxYpWHgmwSCoU9SJE=</Hash><Pid>81607-904-7568995-64478</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
    Error: 0x80070426

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: N/A
    HealthStatus: 0x0001000000000000
    Event Time Stamp: 2:22:2013 08:23
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:
    Tampered Service: sppsvc


    HWID Data-->
    HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAJJRiIL5ddhsGmJhgIL6ABLzjiMxMykQsptXI8YQ3IAJ4qg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x0
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            PTLTD              APIC  
      FACP            NVIDIA        MCP67-M
      SRAT            AMD           HAMMER  
      HPET            PTLTD         HPETTBL
      BOOT            PTLTD         $SBFTBL$
      MCFG            PTLTD           MCFG  
      TCPA            Phoeni        x      
      SSDT            PTLTD         POWERNOW
      SLIC            HPQOEM        SLIC-MPC

    Saturday, February 23, 2013 7:26 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    I have also tried to use the slui.exe to enter a new activation key or call and it will not work.  I get an error.

    Also, do not see anywhere to activate Windows under Computer properties.

    I would go and buy a new copy just to get back to work.

    Ron

    • Edited by Ron Howard Saturday, February 23, 2013 7:37 PM
    Saturday, February 23, 2013 7:35 PM
    |
  • Question
    Sign in to vote
    1
    Sign in to vote

    Duh! - I just realised what the problem is....

    (What Anti-Virus programs have been used on this machine??)

    Please run the following commands, and post the results.

     

    REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC

    REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

     

     They may show something

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 8:16 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    (What Anti-Virus programs have been used on this machine??)

    Eset was used and now we are using Trend Micro.

    It appears that this all happened when I was cleaning up my computer and uninstalling unused programs.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
        DisplayName    REG_SZ    Security Processor Loader Driver
        ErrorControl    REG_DWORD    0x3
        Start    REG_DWORD    0x0
        Type    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
        0    REG_SZ    Root\LEGACY_SPLDR\0000
        Count    REG_DWORD    0x1
        NextInstance    REG_DWORD    0x1


    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
    DR /S

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
        NextInstance    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
        Service    REG_SZ    spldr
        Legacy    REG_DWORD    0x1
        ConfigFlags    REG_DWORD    0x400
        Class    REG_SZ    LegacyDriver
        ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
        DeviceDesc    REG_SZ    Security Processor Loader Driver
        Capabilities    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
        ActiveService    REG_SZ    spldr


    C:\Windows\system32>
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
    VC
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
    SVC
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>


    • Edited by Ron Howard Saturday, February 23, 2013 8:28 PM
    Saturday, February 23, 2013 8:23 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Please run the last command again - it didn't run last time around :)

    Hmmm - please run the cleanup tool for Eset...

    http://kb.eset.com/esetkb/index?page=content&id=soln2289

    It may be that bits of it remain behind, and are now getting in the way.

    The output from the rest of the commands is normal - and that's very rare, when coupled with the error messages you have.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 8:34 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
    SVC
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>
    Saturday, February 23, 2013 8:37 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    I used the cleanup tool to remove Symantec along with ESET.  I forgot that many years ago we have used Symantec.

    I ran the script above with the same results.

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
        DisplayName    REG_SZ    Security Processor Loader Driver
        ErrorControl    REG_DWORD    0x3
        Start    REG_DWORD    0x0
        Type    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
        0    REG_SZ    Root\LEGACY_SPLDR\0000
        Count    REG_DWORD    0x1
        NextInstance    REG_DWORD    0x1


    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
    DR /S

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
        NextInstance    REG_DWORD    0x1

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
        Service    REG_SZ    spldr
        Legacy    REG_DWORD    0x1
        ConfigFlags    REG_DWORD    0x400
        Class    REG_SZ    LegacyDriver
        ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
        DeviceDesc    REG_SZ    Security Processor Loader Driver
        Capabilities    REG_DWORD    0x0

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
        ActiveService    REG_SZ    spldr


    C:\Windows\system32>
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
    VC
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>
    C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
    SVC
    ERROR: The system was unable to find the specified registry key or value.

    C:\Windows\system32>


    • Edited by Ron Howard Saturday, February 23, 2013 9:21 PM
    Saturday, February 23, 2013 9:20 PM
    |
  • Question
    Sign in to vote
    1
    Sign in to vote

    There's something blocking the SPPSVC from running - every time I've seen this error pair before, it's been a problem with the SPLDR driver/service not starting

    Perhaps there's another driver failing to load?

    Please check Device Manager for any yellow- or red-flagged devices, and note which they are.

    Please also post the following Event logs...

    Please open Event Viewer

    In the left pane, navigate to the Windows Logs

    right-click on Applications and select 'Save all events as...' save as Apps.evtx

    repeat for the System logs - save as Sys.evtx

    Compress both files, and attach to your reply.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 10:11 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Here you go!  Checked device manager and saw no errors.

    https://skydrive.live.com/redir?resid=1BF3CA772330A554!108&authkey=!AA5QjRQKt1AjK1Q

    Thanks for all the assistance!

    Ron

    Saturday, February 23, 2013 10:48 PM
    |
  • Question
    Sign in to vote
    1
    Sign in to vote

    Sorry - I should have mentioned that you will need to enable 'View hidden devices' in Device Manager.

    This enables the viewing of non- plug-and-play drivers.

    (the evidence should be in the Event logs anyhow - but I may not get to them until tomorrow.)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 11:11 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    No problem.  I did that since I saw in one of your other posts. 

    I really do appreciate the assistance.

    Ron

    • Edited by Ron Howard Saturday, February 23, 2013 11:16 PM
    Saturday, February 23, 2013 11:16 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    The basic problem appears to be an 'Access Denied' error specifically on the SPPSVC service.

    This could be either because the registry entries involved or their permissions are corrupted, or because the files involved have misplace permissions.

    Please run the following commands and post the results.

    ICACLS C:\Windows\sppsvc.exe /T

    ICACLS C:\Windows\sppuinotify.dll /T

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 11:24 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Windows\system32>ICACLS C:\Windows\sppsvc.exe /T
    C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                                   BUILTIN\Administrators:(RX)
                                   NT AUTHORITY\SYSTEM:(RX)
                                   BUILTIN\Users:(RX)

    C:\Windows\System32\LogFiles\WMI\RtBackup\*: Access is denied.
    Successfully processed 1 files; Failed processing 1 files

    C:\Windows\system32>ICACLS C:\Windows\sppuinotify.dll /T
    C:\Windows\System32\sppuinotify.dll NT SERVICE\TrustedInstaller:(F)
                                        BUILTIN\Administrators:(RX)
                                        NT AUTHORITY\SYSTEM:(RX)
                                        BUILTIN\Users:(RX)

    C:\Windows\System32\LogFiles\WMI\RtBackup\*: Access is denied.
    Successfully processed 1 files; Failed processing 1 files

    C:\Windows\system32>
    C:\Windows\system32>
    Saturday, February 23, 2013 11:31 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thee appear to be a number of hardware problems - at every boot, there are three errors involving the errors shown here http://social.technet.microsoft.com/wiki/contents/articles/3567.event-id-18-microsoft-windows-whea-logger.aspx

    I would suggest first updating the Chipset drivers for your motherboard, and also check the BIOS is the latest available for Windows 7

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, February 23, 2013 11:37 PM
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Noel - Thanks for all of you assistance.  I was able to figure out that it was a read-only issue with the windows directory.  I got that from another post of yours.

    Ron

    Sunday, February 24, 2013 3:11 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Well done!

    I'd probably have got there eventually :)

    Good luck.

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Sunday, February 24, 2013 11:14 AM
    |
    Moderator