Remove From My Forums

Windows 7 Validation Issue (Has worked for 2 years and this week it is not)

Question
0

Sign in to vote

Let me know what you all think!

Thanks! Ron

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-YFBX6-QGWPC-XTF82
Windows Product Key Hash: vjjwgOzNYesRUgK2xjRNmsWeWk8=
Windows Product ID: 00371-618-2299751-85351
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: 2.0.48.0
OGAExec.exe Signed By: Microsoft
OGAAddin.dll Signed By: Microsoft

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Outlook 2007 - 100 Genuine
Microsoft Office Standard 2007 - 100 Genuine
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XTF82</PKey><PID>00371-618-2299751-85351</PID><PIDType>5</PIDType><SID>S-1-5-21-3290562497-994334242-1542482041</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9700 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27    </Version><SMBIOSVersion major="2" minor="4"/><Date>20080111000000.000000+000</Date></BIOS><HWID>7BC03507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00E0-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Outlook 2007</Name><Ver>12</Ver><Val>6FC56FA7A3E7D86</Val><Hash>6xgvjrQk4rRhxbm8UccfDBWIPSw=</Hash><Pid>89458-707-1525087-63082</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>C29E1A8061E3710</Val><Hash>ocgfEWzOh0KxYpWHgmwSCoU9SJE=</Hash><Pid>81607-904-7568995-64478</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 2:21:2013 15:53
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc

HWID Data-->
HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAJJRiIL5ddhsGmJhgIL6ABLzjiMxMykQsptXI8YQ3IAJ4qg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name   OEMID Value   OEMTableID Value
APIC           PTLTD            APIC
FACP           NVIDIA       MCP67-M
SRAT           AMD         HAMMER
HPET           PTLTD        HPETTBL
BOOT           PTLTD        $SBFTBL$
MCFG           PTLTD           MCFG
TCPA           Phoeni       x
SSDT           PTLTD        POWERNOW
SLIC           HPQOEM       SLIC-MPC

Friday, February 22, 2013 12:36 AM

Answers

0

Sign in to vote
Noel - Thanks for all of you assistance. I was able to figure out that it was a read-only issue with the windows directory. I got that from another post of yours.

Ron
- Proposed as answer by Noel D PatonModerator Sunday, February 24, 2013 11:14 AM
- Marked as answer by Noel D PatonModerator Sunday, March 3, 2013 1:33 PM
Sunday, February 24, 2013 3:11 AM

All replies

0

Sign in to vote

Additional information :

Windows Validation Check
Version: 1.9.12.5
Log Created On: 1917_21-02-2013
-----------------------

Windows Information
-----------------------
Windows Version: Windows 7 Service Pack 1
Windows Mode: Normal
Systemroot Path: C:\Windows

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates and install them automatically.
-----------------------
Last Success Time for Update Detection: 2013-01-26 10:46:49
Last Success Time for Update Download: 2013-02-21 22:56:25
Last Success Time for Update Installation: 2013-02-21 23:28:27

WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------

WVCheck's File Dump
-----------------------
C:\Windows\System32\slwga.dll
Size: 14336 bytes
Creation; 8/6/2011 22:35:52
Modification; 20/11/2010 7:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_ff27e02604a90885\slwga.dll
Size: 13824 bytes
Creation; 13/7/2009 19:36:22
Modification; 13/7/2009 21:16:15
MD5; 01fe4bdd0b47a7d8bf34d78d2bc23ddb
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_ff66c6b2047a22cd\slwga.dll
Size: 14336 bytes
Creation; 9/2/2011 8:50:12
Modification; 21/12/2010 0:38:16
MD5; 2008845b41d561fb77b77bbe0045099e
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_ffc423831db91904\slwga.dll
Size: 14336 bytes
Creation; 9/2/2011 8:50:12
Modification; 21/12/2010 0:29:6
MD5; 2332de32759ebcc691850e092b2564a6
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
Size: 14336 bytes
Creation; 8/6/2011 22:35:52
Modification; 20/11/2010 7:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------

WVCheck's Dir Dump
-----------------------
WVCheck found no known bad directories.

WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.

WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.

WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - f1dd3acaee5e6b4bbc69bc6df75cef66

-------- End of File, program close at 1935_21-02-2013 --------

Friday, February 22, 2013 12:47 AM
0

Sign in to vote

Thanks for the WVCheck :)

Please run a full CHKDSK and SFC scan....

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

CHKDSK C: /R

and hit the Enter key.

You will be told that the drive is locked,

and the CHKDSK will run at he next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

then run the SFC.

SFC -System File Checker - Instructions

Click on Start > All Programs > Accessories

Right-click on the Command Prompt entry

Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

At the Command prompt, type

SFC /SCANNOW

and hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.

Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive Public folder (http://skydrive.live.com ) and post a link to it so that I can take a look.

Post a new MGADiag report with details of any error messages encountered.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Friday, February 22, 2013 9:15 PM

Moderator
0

Sign in to vote

Link to CBS Log:

https://skydrive.live.com/redir?resid=1BF3CA772330A554!107&authkey=!AOcl3_oPO5euCr0

No errors noted on SFC scan.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-YFBX6-QGWPC-XTF82
Windows Product Key Hash: vjjwgOzNYesRUgK2xjRNmsWeWk8=
Windows Product ID: 00371-618-2299751-85351
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: 2.0.48.0
OGAExec.exe Signed By: Microsoft
OGAAddin.dll Signed By: Microsoft

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Outlook 2007 - 100 Genuine
Microsoft Office Standard 2007 - 100 Genuine
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{77C715FC-BE5D-4A9B-83D8-ED0EA581A83E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-XTF82</PKey><PID>00371-618-2299751-85351</PID><PIDType>5</PIDType><SID>S-1-5-21-3290562497-994334242-1542482041</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dv9700 Notebook PC    </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.27    </Version><SMBIOSVersion major="2" minor="4"/><Date>20080111000000.000000+000</Date></BIOS><HWID>7BC03507018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00E0-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Outlook 2007</Name><Ver>12</Ver><Val>6FC56FA7A3E7D86</Val><Hash>6xgvjrQk4rRhxbm8UccfDBWIPSw=</Hash><Pid>89458-707-1525087-63082</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0012-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard 2007</Name><Ver>12</Ver><Val>C29E1A8061E3710</Val><Hash>ocgfEWzOh0KxYpWHgmwSCoU9SJE=</Hash><Pid>81607-904-7568995-64478</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 2:22:2013 08:23
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc

HWID Data-->
HWID Hash Current: OgAAAAEABwABAAEAAAABAAAAAwABAAEAJJRiIL5ddhsGmJhgIL6ABLzjiMxMykQsptXI8YQ3IAJ4qg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x0
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name   OEMID Value   OEMTableID Value
APIC           PTLTD            APIC
FACP           NVIDIA       MCP67-M
SRAT           AMD         HAMMER
HPET           PTLTD        HPETTBL
BOOT           PTLTD        $SBFTBL$
MCFG           PTLTD           MCFG
TCPA           Phoeni       x
SSDT           PTLTD        POWERNOW
SLIC           HPQOEM       SLIC-MPC

Saturday, February 23, 2013 7:26 PM
0

Sign in to vote
I have also tried to use the slui.exe to enter a new activation key or call and it will not work. I get an error.

Also, do not see anywhere to activate Windows under Computer properties.

I would go and buy a new copy just to get back to work.

Ron
- Edited by Ron Howard Saturday, February 23, 2013 7:37 PM
Saturday, February 23, 2013 7:35 PM
1

Sign in to vote

Duh! - I just realised what the problem is....

(What Anti-Virus programs have been used on this machine??)

Please run the following commands, and post the results.

REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S

REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC

REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC

They may show something

Here are some instructions to make life easier :)

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 8:16 PM

Moderator
0

Sign in to vote
(What Anti-Virus programs have been used on this machine??)

Eset was used and now we are using Trend Micro.

It appears that this all happened when I was cleaning up my computer and uninstalling unused programs.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
    DisplayName    REG_SZ    Security Processor Loader Driver
    ErrorControl    REG_DWORD    0x3
    Start    REG_DWORD    0x0
    Type    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
    0    REG_SZ    Root\LEGACY_SPLDR\0000
    Count    REG_DWORD    0x1
    NextInstance    REG_DWORD    0x1

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
DR /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
    NextInstance    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
    Service    REG_SZ    spldr
    Legacy    REG_DWORD    0x1
    ConfigFlags    REG_DWORD    0x400
    Class    REG_SZ    LegacyDriver
    ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
    DeviceDesc    REG_SZ    Security Processor Loader Driver
    Capabilities    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
    ActiveService    REG_SZ    spldr

C:\Windows\system32>
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
VC
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\system32>
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
SVC
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\system32>
- Edited by Ron Howard Saturday, February 23, 2013 8:28 PM
Saturday, February 23, 2013 8:23 PM
0

Sign in to vote

Please run the last command again - it didn't run last time around :)

Hmmm - please run the cleanup tool for Eset...

http://kb.eset.com/esetkb/index?page=content&id=soln2289

It may be that bits of it remain behind, and are now getting in the way.

The output from the rest of the commands is normal - and that's very rare, when coupled with the error messages you have.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 8:34 PM

Moderator
0

Sign in to vote

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
SVC
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\system32>

Saturday, February 23, 2013 8:37 PM
0

Sign in to vote
I used the cleanup tool to remove Symantec along with ESET. I forgot that many years ago we have used Symantec.

I ran the script above with the same results.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr
    DisplayName    REG_SZ    Security Processor Loader Driver
    ErrorControl    REG_DWORD    0x3
    Start    REG_DWORD    0x0
    Type    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spldr\Enum
    0    REG_SZ    Root\LEGACY_SPLDR\0000
    Count    REG_DWORD    0x1
    NextInstance    REG_DWORD    0x1

C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPL
DR /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR
    NextInstance    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000
    Service    REG_SZ    spldr
    Legacy    REG_DWORD    0x1
    ConfigFlags    REG_DWORD    0x400
    Class    REG_SZ    LegacyDriver
    ClassGUID    REG_SZ    {8ECC055D-047F-11D1-A537-0000F8753ED1}
    DeviceDesc    REG_SZ    Security Processor Loader Driver
    Capabilities    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR\0000\Control
    ActiveService    REG_SZ    spldr

C:\Windows\system32>
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLS
VC
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\system32>
C:\Windows\system32>REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPP
SVC
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\system32>
- Edited by Ron Howard Saturday, February 23, 2013 9:21 PM
Saturday, February 23, 2013 9:20 PM
1

Sign in to vote

There's something blocking the SPPSVC from running - every time I've seen this error pair before, it's been a problem with the SPLDR driver/service not starting

Perhaps there's another driver failing to load?

Please check Device Manager for any yellow- or red-flagged devices, and note which they are.

Please also post the following Event logs...

Please open Event Viewer

In the left pane, navigate to the Windows Logs

right-click on Applications and select 'Save all events as...' save as Apps.evtx

repeat for the System logs - save as Sys.evtx

Compress both files, and attach to your reply.

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 10:11 PM

Moderator
0

Sign in to vote

Here you go! Checked device manager and saw no errors.

https://skydrive.live.com/redir?resid=1BF3CA772330A554!108&authkey=!AA5QjRQKt1AjK1Q

Thanks for all the assistance!

Ron

Saturday, February 23, 2013 10:48 PM
1

Sign in to vote

Sorry - I should have mentioned that you will need to enable 'View hidden devices' in Device Manager.

This enables the viewing of non- plug-and-play drivers.

(the evidence should be in the Event logs anyhow - but I may not get to them until tomorrow.)

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 11:11 PM

Moderator
0

Sign in to vote
No problem. I did that since I saw in one of your other posts.

I really do appreciate the assistance.

Ron
- Edited by Ron Howard Saturday, February 23, 2013 11:16 PM
Saturday, February 23, 2013 11:16 PM
0

Sign in to vote

The basic problem appears to be an 'Access Denied' error specifically on the SPPSVC service.

This could be either because the registry entries involved or their permissions are corrupted, or because the files involved have misplace permissions.

Please run the following commands and post the results.

ICACLS C:\Windows\sppsvc.exe /T

ICACLS C:\Windows\sppuinotify.dll /T

Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 11:24 PM

Moderator
0

Sign in to vote

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ICACLS C:\Windows\sppsvc.exe /T
C:\Windows\System32\sppsvc.exe NT SERVICE\TrustedInstaller:(F)
                               BUILTIN\Administrators:(RX)
                               NT AUTHORITY\SYSTEM:(RX)
                               BUILTIN\Users:(RX)

C:\Windows\System32\LogFiles\WMI\RtBackup\*: Access is denied.
Successfully processed 1 files; Failed processing 1 files

C:\Windows\system32>ICACLS C:\Windows\sppuinotify.dll /T
C:\Windows\System32\sppuinotify.dll NT SERVICE\TrustedInstaller:(F)
                                    BUILTIN\Administrators:(RX)
                                    NT AUTHORITY\SYSTEM:(RX)
                                    BUILTIN\Users:(RX)

C:\Windows\System32\LogFiles\WMI\RtBackup\*: Access is denied.
Successfully processed 1 files; Failed processing 1 files

C:\Windows\system32>
C:\Windows\system32>

Saturday, February 23, 2013 11:31 PM
0

Sign in to vote

Thee appear to be a number of hardware problems - at every boot, there are three errors involving the errors shown here http://social.technet.microsoft.com/wiki/contents/articles/3567.event-id-18-microsoft-windows-whea-logger.aspx

I would suggest first updating the Chipset drivers for your motherboard, and also check the BIOS is the latest available for Windows 7
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Saturday, February 23, 2013 11:37 PM

Moderator
0

Sign in to vote
Noel - Thanks for all of you assistance. I was able to figure out that it was a read-only issue with the windows directory. I got that from another post of yours.

Ron
- Proposed as answer by Noel D PatonModerator Sunday, February 24, 2013 11:14 AM
- Marked as answer by Noel D PatonModerator Sunday, March 3, 2013 1:33 PM
Sunday, February 24, 2013 3:11 AM
0

Sign in to vote

Well done!

I'd probably have got there eventually :)

Good luck.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.

Sunday, February 24, 2013 11:14 AM

Moderator

Answered by:

Windows 7 Validation Issue (Has worked for 2 years and this week it is not)

Question

Answers

All replies