turn on bfe service windows 7 (which file do I copy paste)

After ensuring the malware is gone, follow the instructions in this Microsoft Answers forum post to actually restore the BFE service
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/windows-7-base-filtering-engine-is-not-running/d440bf07-e9fa-40e4-9344-4651a2214cdf



which file do I copy paste
LVL 1
rgb192Asked:
Who is Participating?
 
Darr247Connect With a Mentor Commented:
If you checked the 6 boxes
(for
"Query Value"
"Set Value"
"Create Subkey"
"Enumerate Subkeys"
"Notify"
"Read Control"
)
the Base Filtering Engine service should start now if it's set to Automatic.
0
 
Matt VCommented:
You want to export the following registry key from a working PC to a file, then copy the .REG file to the non-working machine and import it.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE]
0
 
Darr247Commented:
Why didn't you just ask that in
http://www.experts-exchange.com/Networking/Misc/Q_27988739.html ?

I would've attached these files there, instead.

Having UAC disabled is NOT recommended by anyone I'm aware of, by the way... that's likely a large contributor to the BFE service getting deleted, since merely going to a web page can make changes to your system with no chance to stop it, whether you have Norton installed or not. UAC is really no different than having to open a door to enter or leave a building... disabling it is like removing the door from your house; the lock on the door is analogous to user versus administration level accounts (with an administrator password the key to the lock).
Win7x86RestoreBFE.reg
Win7x64RestoreBFE.reg
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
rgb192Author Commented:
I dont understand
mattvmotas

and
Darr247
has the file (64bit)

but where do I put the file
0
 
Darr247Commented:
Save or Save As..  it anywhere you like. When it finishes, click Run... and if prompted, allow Regedit to import it (it should tell you when it's finished merging it into the registry). Then reboot, and BFE should be in the services.msc snapin... if it's not running already at that point, set its Startup type to Automatic and click Start.
0
 
rgb192Author Commented:
bfe

after running file from Darr247
the bfe service now is automatic at startup
I restarted computer

but will not run when I do services->run as admin
0
 
Darr247Commented:
Open Regedit, navigate to and right-click on
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE
choose Permissions

Click the Advanced button on the Permissions dialog.

In the Advanced dialog, go to the Owner tab and if the logged on user is not the 'Current owner' then click that username in the Change owner to box, check the Replace owner on subcontainers and objects box, then Apply to take ownership of it.

On the Permissions tab tell us what users are listed with Full Control in the Permission category.
0
 
rgb192Author Commented:
added full control to the user on top

check the Replace owner on subcontainers and objects box, then Apply to take ownership of it.

I am not sure what user I am but I
added full control to the user on top

I tried running the service as admin and got same error dialog box
0
 
Darr247Commented:
The logged on user is shown in the Change owner to box on the Owner tab (which is between the Auditing and Effective Permissions tabs in the screen shot above).
0
 
rgb192Author Commented:
who is the owner
who is the owner
0
 
Darr247Commented:
The user "Acer" is the owner...  still, on the Owner tab, check the 'Replace owner... ' box at the bottom and click Apply, then go back to the Permissions tab and give Acer Full Control, with the 'Replace all child...' box checked, and click Apply again.  

After that, reboot, and the user Acer should be able to start the BFE service if it doesn't start automatically.
0
 
rgb192Author Commented:
0
 
Darr247Commented:
>> then go back to the Permissions tab and give Acer Full Control

e.g. Select the user "Acer" Acer user accountThen click Edit

In the Apply to: picklist, choose This key and subkeys
Check the Full Control box in the Allow column, then click OK, OK, OK, close Regedit, reboot, and check in services.msc again to see if the BFE service started.
0
 
rgb192Author Commented:
i checked on the checkboxes on the left also
 



i checked on the checkboxes on the left alsoand restarted
still same dialog box
0
 
Darr247Commented:
Click the 'start' orb, type in eventvwr.msc and hit Enter.
On the left, expand Windows Logs and click on System

In the middle, look for messages from the Service Control Manager that mention the BFE service and it should tell you why it won't start.
0
 
rgb192Author Commented:
xml view


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> 
  <EventID Qualifiers="49152">7023</EventID> 
  <Version>0</Version> 
  <Level>2</Level> 
  <Task>0</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8080000000000000</Keywords> 
  <TimeCreated SystemTime="2013-01-12T23:23:25.431860800Z" /> 
  <EventRecordID>112200</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="704" ThreadID="856" /> 
  <Channel>System</Channel> 
  <Computer>Acer-PC</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="param1">Base Filtering Engine</Data> 
  <Data Name="param2">%%5</Data> 
  </EventData>
  </Event>

Open in new window

0
 
Darr247Commented:
Usually the message[s] on Event Viewer's General tab will tell you in plain english what the problem is.

You should be able to click and swipe across the message[s] on the General tab, copy to clipboard with Ctrl+C then paste those messages into a comment here.
0
 
rgb192Author Commented:
general message:
The Base Filtering Engine service terminated with the following error:
Access is denied.
0
 
Darr247Commented:
OK... there are still DACL problems.
Here's a site that should fix the specific problem you have with the BFE service if you follow its instructions step by step... it has screen shots with each step numbered; you should be able to start at step 3.
http://www.internetdownloadmanager.com/register/new_faq/enableBFE2.html
0
 
rgb192Author Commented:
step 4
top left

group or other user names

which one do I select
0
 
Darr247Commented:
Selecting any of them isn't necessary... instead, just click the Advanced button (even if you already selected one).
0
 
rgb192Author Commented:
what else should I do

bfe

should I check second checkbox
0
 
rgb192Author Commented:
base filtering engine is now running

thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.