PDA

View Full Version : Failed to open service key?


kluelos
04-03-2007, 02:35 AM
Trying to install v1.42 on Win2k3 (or uninstall it, or just get off TDC), but when I start the installer I get two identical messages in a row, "Failed to open service key", and the installer quits. (Same for the Daemon Tools installer).

I previously had this working under Alcohol 120%, but it died. It refused to uninstall, as did Daemon tools "can't validate current installation". I'm at the point of trying to get everything off the computer and try again, but I can't get past this error. I also can't get rid of the SPTD key despite a lot of trying.
It thinks it's not installed. Can't install it to uninstall it.

What else can I try?

kluelos
04-03-2007, 09:01 AM
Hmm, can't edit the above. Anyway, I've gotten past this, but am now caught in an endless loop of "SPTD installation can't be validated... disable and reboot", Reboot, reinstall, reboot, try to uninstall. "Can't be validated...".

I attempted to remove the installation manually following directions on another thread, thus:

...
After reboot delete the whole sptd key in services hive. If you get error message about permissions enable all permissions on cfg key first.
...

I am unable to delete this key. Regedt32 (this is Win2k) refuses to show me the contents of the Services subfolder -- any of it. I've tried expanding the branch, expanding all, viewed data only, tree only, tree and data, just to make sure. When I ask it to expand it behaves as though it had done so, (not locked up, no wait cursor) but won't expand it. So I cannot change permissions on the key(s).
I've tried deleting the keys with RegSeeker, which claims to succeed, but does not -- it's still there.

What can I do?

Digger
04-03-2007, 11:07 AM
You must disable SPTD layer (set Start value to 4) and reboot. After reboot you can change permissions of cfg key and delete the whole sptd key.
Ensure System and Administrator have full access to Services hive.

kluelos
04-03-2007, 06:31 PM
I've assured that the start value is set to 4 and have rebooted. Regedt32 still will not display the subkeys. I tried changing permission/ownership by propagating same, but this gives me an error message, "RE can't change ownership of this key or some of its subkeys". Nevertheless, this did seem to work and I can now delete the thing with regedit. Still cannot display it with regedt32 though. Very odd.

Still, this is progress. Whether it's enough progress, awaits developments.

kluelos
04-03-2007, 07:29 PM
Alas, no it isn't. I'm back to the "installation could not be validated" loop as first described. How can I get through ths?

Digger
04-03-2007, 07:48 PM
After you deleted SPTD key in services hive you must re-install all software using SPTD layer.
But first of all ensure correct SPTD layer installation, execute stand alone installer after reboot again. It must say SPTD version 1.42 detected. If it says no SPTD version detected, check system eventlog (execute eventvwr.msc) for error messages regarding SPTD layer. Post the whole error message including all error bytes.

kluelos
04-03-2007, 11:05 PM
I did indeed get SPTD errors after following this procedure, with the stand-alone installer:

Source: sptd
Event ID: 4

Driver detected an internal error in its data structures for .

0000: 00 00 00 00 01 00 52 00 ......R.
0008: 00 00 00 00 04 00 04 c0 .......À
0010: e7 00 00 00 89 45 fc 85 ç...‰Eü…
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Digger
04-04-2007, 11:27 AM
You've some software running hooking system API calls that interferes with normal operation. Could be virus, rootkit, or some rootkit detection of uber-smart anti-virus.