Windows 7: sppsvc file not found

I have multiple problems so i will list them step by step. Here it goes.

Installed Windows 7 ultimate x86 a year back. Used daz loader v1.7 (piracy i know). The system worked fine until now.
But since the past month i have been getting the "Windows not Genuine" and "You might be a victim of software counterfeiting" messages. The desktop is black with the little not genuine message in the bottom of the screen.
I tried using WAT Fix. No result. Then did a sfc scan. It shows that the pkeyconfig.xrm-ms file is corrupted (in the store too) and cannot be repaired. So i tried to replace the file from the setup. It did not solve the problem.
Then i came across fixes on google. When trying them out i came too know that slui.exe is not working.! I also tried out MBR Regenerator. It fixed my black desktop. But still under the Windows Activation page it shows Status Not Available and Product ID not available.
I never used removeWAT or any other similar software. Only used the Loader by daz.
Here is my MGADiag report.


Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {B76D4787-53A1-4B4D-AE9A-6B2B1E273D9C}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Shantanu\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed



File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{B76D4787-53A1-4B4D-AE9A-6B2B1E273D9C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2070406037-1526322960-3182620498</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq Presario CQ60 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.65</Version><SMBIOSVersion major="2" minor="4"/><Date>20101215000000.000000+000</Date></BIOS><HWID>AFF03407018400F8</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:31:2012 14:07
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc


HWID Data-->
HWID Hash Current: MAAAAAEAAgABAAIAAAABAAAAAgABAAEAeqgIazboQq16f1IzdmmeRgR2ejl+YUbK

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INSYDE
FACP HPQOEM SLIC-MPC
HPET INSYDE SLIC-MPC
BOOT INSYDE INSYDE
MCFG INSYDE
ASF! INTEL HCG
SLIC HPQOEM SLIC-MPC
SSDT INTEL SataAhci
SSDT INTEL SataAhci

Btw i cannot start the sppsvc service. It gives the system 2 error ie. file not found.
Hoping for some help..!!

Your report is indicating problems with the file system
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type
CHKDSK C: /R
and hit the Enter key
You will be told that the drive is locked, and the CHKDSK will run at he next boot - hit the Y key, and then reboot. The chkdsk will take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) - then run the SFC

SFC -System File Checker - Instructions
Click on the Start button
type in the Search box
CMD.EXE
right-click on the only file that is found
Select Run as Administrator
- the Elevated Command Prompt window should pop up
At the Command prompt, type

SFC /SCANNOW

and hit the Enter key
Wait for the scan to finish - make a note of any error messages - and then reboot.

run another MGADiag report, and post the results.

I already tried doing a chkdsk twice. It did not help.
But if you want i will do it again and will post the report.

Please look in the Event Viewer for (Windows Application logs) Wininit events - the logs are there - post the latest one.
Just run the SFC, then check that teh file C:\Windows\System32\sppsvc.exe does actually exist.

The sppsvc.exe file exists in both C:\Windows\system32 folder and the C:\Windows\winsxs folders.

This is the second last

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 31-01-2012 17:21:26
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shantanu-PC
Description:
The Software Protection service failed to start. 0x80070002
6.1.7600.16385
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-01-31T11:51:26.000000000Z" />
<EventRecordID>10180</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Shantanu-PC</Computer>
<Security />
</System>
<EventData>
<Data>0x80070002</Data>
<Data>6.1.7600.16385</Data>
</EventData>
</Event>

and this one is the latest

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 31-01-2012 17:21:26
Event ID: 903
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Shantanu-PC
Description:
The Software Protection service has stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">903</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-01-31T11:51:26.000000000Z" />
<EventRecordID>10181</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Shantanu-PC</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>


Here is the latest MGADiag report.


Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: N/A, hr = 0xc0000022
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {B76D4787-53A1-4B4D-AE9A-6B2B1E273D9C}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7600.win7_gdr.110622-1503
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Shantanu\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{B76D4787-53A1-4B4D-AE9A-6B2B1E273D9C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-2070406037-1526322960-3182620498</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Compaq Presario CQ60 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.65</Version><SMBIOSVersion major="2" minor="4"/><Date>20101215000000.000000+000</Date></BIOS><HWID>AFF03407018400F8</HWID><UserLCID>4009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x80070426' to display the error text.
Error: 0x80070426

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x0001000000000000
Event Time Stamp: 1:31:2012 14:07
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered Service: sppsvc


HWID Data-->
HWID Hash Current: MAAAAAEAAgABAAIAAAABAAAAAgABAAEAeqgIazboQq16f1IzdmmeRgR2ejl+YUbK

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC INSYDE
FACP HPQOEM SLIC-MPC
HPET INSYDE SLIC-MPC
BOOT INSYDE INSYDE
MCFG INSYDE
ASF! INTEL HCG
SLIC HPQOEM SLIC-MPC
SSDT INTEL SataAhci
SSDT INTEL SataAhci

For info,
My laptop is a Compaq Presario CQ60-420US model.

OK
I asked for the Wininit (CHKDSK) errors - those are the SPPSVC errors.

Please open an elevated command prompt window, and run the following commands.
DIR C:\Windows\System32\sppsvc.exe
ICACLS C:\Windows\System32\Sppsvc.exe
net start sppsvc
sc qc sppsvc
sc queryex sppsvc
sc qprivs sppsvc
sc qsidtype sppsvc
sc sdshow sppsvc

copy and paste the results into your response (to copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response),

Oh. Sorry.
Here you go..

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>dir c:\windows\system32\sppsvc.exe
Volume in drive C is Windows
Volume Serial Number is FC87-F7F2

Directory of c:\windows\system32

14-07-2009 06:44 3,179,520 sppsvc.exe
1 File(s) 3,179,520 bytes
0 Dir(s) 145,655,799,808 bytes free

C:\Windows\system32>icacls c:\windows\system32\sppsvc.exe
c:\windows\system32\sppsvc.exe NT SERVICE\TrustedInstallerF)
BUILTIN\AdministratorsRX)
NT AUTHORITY\SYSTEMRX)
BUILTIN\UsersRX)

Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>net start sppsvc
The Software Protection service is starting.
The Software Protection service could not be started.

A system error has occurred.

System error 2 has occurred.

The system cannot find the file specified.


C:\Windows\system32>sc qc sppsvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: sppsvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\sppsvc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Software Protection
DEPENDENCIES : RpcSs
SERVICE_START_NAME : NT AUTHORITY\NetworkService

C:\Windows\system32>sc queryex sppsvc

SERVICE_NAME: sppsvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 2 (0x2)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Windows\system32>sc qprivs sppsvc
[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: sppsvc
PRIVILEGES : SeAuditPrivilege
: SeChangeNotifyPrivilege
: SeCreateGlobalPrivilege
: SeImpersonatePrivilege

C:\Windows\system32>sc qsidtype sppsvc
[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: sppsvc
SERVICE_SID_TYPE: UNRESTRICTED

C:\Windows\system32>sc sdshow sppsvc

DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO
CRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCW
DWO;;;WD)

C:\Windows\system32>

Btw mate, i am happy that one of the most respected user in this forum is helping me.

Still nothing jumping out at me

System Error 2 is a hard nut to crack - it's usually the result of file corruption of some kind, and I suspect that it has very little to do with the actual file itself.

The usual practice is for me to refer the poster to MS WGA Support for assistance, as so far the only way I currently know to repair the problem is a repair install at best, and a reformat/reinstall at worst.

If you're prepared for what would be a long haul, then I'd be happy to work on isolating the problem and finding a fix - otherwise, either contact MS, or do a repair install (Repair Install).

WGA Support can be found here-
North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4

Outside North America:
http://support.microsoft.com/contactus/?ws=support#tab0

Please let us know if (and how) MS manage to repair the problem without a repair install of the OS - it would be useful for future reference!

A suggestion, in the run box type services.msc then scroll down to find that service, it has to be run with NETWORK SERVICE not local account.

If that wont allow the change you should go to the windir\system32\sppsvc (it's a hidden system file so you will have to enable viewing of those) and chesk the permissions under file properties, if NT AUTH is denied access for some reason, it can't start sppsvc.

Just on a point of interest, whilst it's not recommended to stop this service, there are no other services that depend on it running, ERGO, you could stop it loading and reboot.