Home > Uncategorized > Solved: Missing Base Filtering Engine in Windows 7

Solved: Missing Base Filtering Engine in Windows 7

December 12th, 2011 Leave a comment Go to comments

UPDATE 21 Jan 2012:  If you are missing just BFE, the information below should be helpful. However, if you are missing BFE, Windows Firewall, Security Center and a couple of other services after a virus infection, you are going to need a more comprehensive security services fix. The second post by Farstrider (that starts “you can also try this:”) works great. After getting the Norton 5013,3 error on yet another customer computer, I found this solution fixed the Norton problem without requiring me to reinstall the OS. HOWEVER, even still the Security Center service was still not starting, fixing that required me to download and run the Security Center registry entry from here (reboot afterward). Good Luck.

It looks like there is a virus now that can take out the Base Filtering Engine Service in Windows 7, and I suppose then in Vista and XP as well. I noticed this problem on a computer that I removed a virus from. Everything looked fine until I went to install Norton Antivirus and it barfed with an error message about Error “5013,3”. The instructions to fix the problem included restarting the Base Filtering Engine Service but oops, it wasn’t even there. As it turns out, the fix for this is easier than you might think.

The fix I used was to recreate the BFE service entry in the registry, which had been deleted. The registry entry that needs to be recreated is:


According to this Microsoft Technet article, you can just export the key from a working machine of the same OS and import it (just double click on the exported and moved .reg file) into the problem machine. I can tell you this absolutely worked like a charm for me.

WordPress won’t let me attach a copy of my Windows 7 x64 BFE entry, but if you need one, this link should work, otherwise leave a comment and I’ll try and mail it to you..


  1. Tom Monroe
    December 15th, 2011 at 22:11 | #1

    I could use a copy of the windows 7 x64 bfe entry…just in case. This problem has been bugging me for a week now…Your solution is the best one I’ve found so far.

  2. Uwlie
    December 15th, 2011 at 23:55 | #2

    if you dont mind can you send me a key? been trying to figure out how to solve the string of missing services.

  3. Justin
    December 16th, 2011 at 14:10 | #3

    I really need a copy of this I am having the sample problem with Norton 360 on Windows 7

  4. Adam Andrews
    December 19th, 2011 at 17:04 | #4

    I was able to recreate the service this way, but I then got an “Access Denied” error trying to start the service.

    After looking around on some forums, I found a workaround — going to the HLKM\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy key, and modifying the Permissions on the key to add a user “NT Service\BFE” and give it Full Control. I’m not sure that’s the _right_ solution, but it allowed me to start the BFE service and the services that depend on it.

  5. JC
    December 20th, 2011 at 23:01 | #5

    I’ve spent weeks on the internet trying to firgure this out. Pleaasse send me a copy…

  6. Tamm
    December 23rd, 2011 at 10:31 | #6

    Holy smokin’ smurfs!! Thank you a gazillion times over Adam Andrews. It may not be “perfectly right” but it works wonderfully well. I was going nutz. You’re a genius my friend.

  7. Tom Rizzo
    December 25th, 2011 at 06:35 | #7

    @Adam Andrews

    How do you get to the “HLKM\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy”? key

  8. tr
    December 25th, 2011 at 06:58 | #8

    modifying the Permissions on the key to add a user “NT Service\BFE” and give it Full Control.

    @Adam Andrews

    How did you modify modify the Permissions on the key to add a user “NT Service\BFE” and give it Full Control?

  9. Michael
    January 7th, 2012 at 23:10 | #9

    @tom rizzo
    Run regedit:
    1. Browse to the location for the BFE service in the registry (HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy), right click and select permissions. (note: HKLM is short for HKEY_LOCAL_MACHINE_
    2. In the “Permissions for Policy” window, click advanced | Add.
    3. Once the “Select Users, Computers or Group” box appears, change the “From this location:” to point to the local machine name.
    4. After changing the search location, enter “NT Service\BFE” in the “Enter the object name to select” box and click “Check names” – this will allow you to add the BFE account.

    5. Give the following privileges to the BFE account:
    Query Value
    Set Value
    Create Subkey
    Enumerate Subkeys
    Read Control

    After adding the BFE account to the registry key, please try to start the Base Filtering Engine service.

  10. Joanne Doward
    January 11th, 2012 at 19:50 | #10

    Allan, I have Norton anti virus. My question, what happens if you have this virus? I don’t think I do. Thank you

  11. elfego
    January 13th, 2012 at 06:50 | #11

    @Adam Andrews
    wow thank you very much for this info i was also going nuts because of this prob,now if is not much to ask can u also send me a copy? much appreciated!!!

  12. martha
    January 16th, 2012 at 00:38 | #12

    hi ive been looking to solve this problem too. i keep getting the virus and the same error. please send key

  13. John Hindal
    January 16th, 2012 at 17:31 | #13

    I have tried all these things. It did get the BFE service back on my services list but I still get the access denied message. Any suggestions?

    • January 16th, 2012 at 17:35 | #14

      Is BFE starting automatically? What about Windows Firewall and Security Center Service? If any of these are not starting or missing, you’ve probably got an insurmountable problem. I haven’t seen it on Windows 7, but I had a Vista machine that had these services so fouled up, there was just no putting that Humpty together again. You may have/want to do a reinstall.

  14. January 19th, 2012 at 00:28 | #15

    Adam Andrews :
    I was able to recreate the service this way, but I then got an “Access Denied” error trying to start the service.
    After looking around on some forums, I found a workaround — going to the HLKM\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy key, and modifying the Permissions on the key to add a user “NT Service\BFE” and give it Full Control. I’m not sure that’s the _right_ solution, but it allowed me to start the BFE service and the services that depend on it.

    HOLY SH*T Thank you.
    After hours trying of trying to get BFE to start, your advice proved successful.

  15. Nike
    January 26th, 2012 at 11:54 | #16

    I just want to say thank you for this guide. It have helped me and I have been able to restore what the virus Windows Internet Security 2012 damaged.

    Thanks !

    I solve it by:
    1. run the Windows 7 x64 BFE entry .reg file.
    2. run the Security Center registry entry .reg file.
    3. Reboot.
    4. Done :)

  16. HawaiiBoyBlue
    January 28th, 2012 at 15:50 | #17

    It works! Awesome tip! Much thanks in saving me hours in troubleshooting this crap!

  17. Carmelo
    February 8th, 2012 at 09:28 | #18

    Thank you very much for your tip. You saved me from reinstalling Windows 7.

  18. Matt
    February 10th, 2012 at 23:47 | #19

    THANK U! Had a PC w/ what I suspect was Security Center 2012 virus, couldn’t get Norton to install (missing BFE). Followed your steps and got BFE up and running by typing services.msc in the start menu and right clicking and selecting start. Now I can install norton A/V and do a full system scan. U DA MAN!

  19. Cathy
    March 6th, 2012 at 18:15 | #20

    Thank you! I spent 3 full days trying to get this fixed! Finally something that worked!!!!!!!!

  20. Big Steve
    March 13th, 2012 at 13:00 | #21

    Many, many, many thanks for this invaluable advice…….. this wass one bloody annoying problem!!!!!

    I’d buy you all a beer if I could! Cheers………………..

  21. jonathan
    March 15th, 2012 at 00:41 | #22

    IPsec Policy Agent and IKE & AuthIPsec Keyring Modules error 1075: the dependency does not exist or has been marked for deletion. Also, the Base Filter Engine is not shown on the services prompt
    please help

  22. John
    March 27th, 2012 at 09:44 | #23

    This was huge. SUCH A GREAT HELP!!!

    Thank you once again – worked for me!!!!

  23. Ishaq @ India
    March 27th, 2012 at 17:09 | #24

    thank u v.v.v.v much dude.. it’s gone.. now my lappi not giving 5013,3 error…

    great help dude…

    • March 27th, 2012 at 17:25 | #25

      Glad that it worked. And say hello to India for us, we lived and worked in Gurgaon for a while several years ago. We had the times of our lives.

  24. David Wheelers
    April 18th, 2012 at 19:21 | #26

    I received the same message. I cannot access my computer via smart mode and system repair does not find aany errors on the system. What can I do?

    • April 18th, 2012 at 20:50 | #27

      I assume by “Smart Mode” you mean “Safe Mode”. If you can’t boot the computer, then you’ve got bigger problems than missing the BFE. You don’t give enough information to really provide any specific advice. Hopefully you’re getting a blue screen at boot time, if so, use the error message in that and Google your heart out.

  25. Dubbs
    April 25th, 2012 at 22:50 | #28

    Just wanted to add my thanks. Had to combine adding the registry key with modifying the permissions as Adam Andrews suggested. Many thanks!

  26. April 27th, 2012 at 06:52 | #29

    Thank you very much.
    This has happened to me twice in the history of W7 x64
    I found this post the 2nd time.

    I hope others can find it as easily.

  27. Oynaq Ozgar
    April 29th, 2012 at 13:50 | #30

    Adam Andrews you are are stealy eyed rocket man.

    Thanks for the fix, worked perfect.

  28. Katrina
    May 7th, 2012 at 22:58 | #31

    I’m only a teenager and I’ve had this problem on my computer for months. I don’t really understand everything said above, could someone talk me through it step by step from “Start” please?

  29. Jigga
    May 13th, 2012 at 03:05 | #32

    @Adam Andrews

    Andrew you are genius man – spent the entire work trying to start my Windows FIREWALL. I even called McAfee Technical Support who gave me some wff executable which was rejected and removed by their own McAfee – well it didn’t help.

    Then I stumbled on this post and I didn’t even have to recreate the BFE service entry in the registry like what the admin suggested. Just straight created the “NT Service\BFE” account because I was getting a ‘denied’ error. Genius Andrew, God bless you man!

  30. Jigga
    May 13th, 2012 at 03:07 | #33


    Sorry I meant to say “…spent the entire week…”

  31. dan
    May 13th, 2012 at 18:18 | #34

    thanks big help

  32. Antonio
    May 21st, 2012 at 06:50 | #35

    Man, this worked excellent.
    Thanks a lot !!

  33. June 1st, 2012 at 10:57 | #36

    dude …u totally rock
    i wantd bfe to hav my idm on google chrome..n it workd..

  34. T.
    June 17th, 2012 at 00:55 | #37

    O, my…. following Adams formula into the wild + heretofore unknowns I got to Step 2 ” Permission for Policy” clicked advanced, then add— and a box came up to say ” Unable to display the user selection dialog. Class not registered”…. of course I’m not even sure why I’m doing this… except somehow to escape the blue screen ( c1000135) + repair circle madness….

    anyway– any ideas?

    many thanks !

  35. June 29th, 2012 at 07:13 | #38

    Thank You….Only dependency not starting is the base filtering engine which … “Windows could not start the base filtering service on Local Computer.

  36. Celina Duncan
    July 11th, 2012 at 06:50 | #39

    i get to the point of starting BFE under servic status, but my computer tells me it cant start on local computer and service is denied error 5. but my computer isnt local. what do i do?

  37. Harsha
    July 27th, 2012 at 11:04 | #40

    This is the best piece of solution on google i must say . Thank you all for your inputs .
    Works like a charm. :)

  38. Pradnya
    July 31st, 2012 at 07:41 | #42

    Hi, Thanks this worked for me too.

    Thanks again!

  39. Devon Melville
    August 7th, 2012 at 19:19 | #43

    @Adam Andrews
    Thank you my friend I actually gave up for a while…………it worked like a charm

  40. Radwan
    August 12th, 2012 at 07:24 | #44

    worked like monster
    thaaaaaaaaaaaaan x @Adam Andrews

  41. EmNe
    August 18th, 2012 at 08:40 | #45

    I am having the same problem and couldn’t find the BFE file…went to the HLKM\SYSTEM\CurrentControlSet\services\ guess what…no BFE file there either. HELP!

    • August 18th, 2012 at 08:45 | #46

      Please read this post again carefully, it has the answer to your question.

  42. EmNe
    August 18th, 2012 at 09:06 | #47

    ok…so I got it to work to get the BFE back but it says access denied when I try to start it…what now?

  43. helpless
    September 8th, 2012 at 16:02 | #48
  44. WaliBaba
    October 16th, 2012 at 08:06 | #49

    A trojan called “zeroaccess” informed me that my computer was locked for violating FBI restrictions re. illegal downloads. The message on my screen told me that I could simply send them [?] $200 via Green Dot or supply my credit or debit card information. Supposedly this was to forego any additional prosecution. Ya, Right! I have Norton and AVG installed but apparently the virus damaged Norton and removed the Windows Base Filtering Engine. AVG stopped and quarantined the virus on a restart. I reinstalled the Norton Security Suite and used your provided download (BFE.etc) as instructed. Thank you.

    • October 16th, 2012 at 08:17 | #50

      You’re very welcome. Make sure you have real-time scanning turned off on AVG, it will mess up the real-time scanning of Norton (and can lock-up your computer at some random time). Personally, Id uninstall it altogether as I don’t think it really adds anything to the Norton protection.

  45. Laura
    November 18th, 2012 at 20:09 | #51

    Ha! Now I know what happened, but I’m afraid I will have to re-install Windows, anyway. I got as far as the Check User or Group box, but when I click Check Names, it comes up with a dialogue box that says “The following object is not from a domain listed in the Select Location dialogue box, and is therefore not valid: NT Services\BFE. I’m a little peeved because I’ve had Trend for years, and have never had a virus slip through before.

    • November 19th, 2012 at 10:42 | #52

      I’m not a fan of Trend, although they have had good results lately. Alas, there is no A/V that prevents all infections.

  46. deb
    December 8th, 2012 at 20:42 | #53

    This fix worked like a charm!! Thank you!
    Imported the BFE registry entry, and restarted my laptop. And walahhh, BFE Service is now there and it is running, including IKE and IPsec Services which could not start prior because BFE was gone. Brillant!! Thanks again, you saved me.

  47. barb
    December 12th, 2012 at 13:54 | #54

    Thanks for this detailed resolution. Following the steps provided I was able to get my neighbor’s laptop up and working again. I know enough to not make registry modifications without specific instructions. Your information provided this.

    • December 12th, 2012 at 15:25 | #55

      I’m glad this helped. Good advice on editing the registry.

  48. frio
    January 17th, 2013 at 02:48 | #56

    i already have bfe installed but how can i run it into safe mode ?

  49. muneet
    June 7th, 2013 at 12:36 | #58

    ineed a copy of win7 ultimate 32bit…..plzzzzz

  50. tek
    October 2nd, 2013 at 01:22 | #59

    Your solution worked like a charm.. I’ve been ignoring this issue for weeks but if it was this easy, I would’ve done it while back. Thank you very much!!!

  51. jerry
    November 23rd, 2013 at 00:32 | #60

    I have the BFE problem; I will take you up on the offer to mail the fix. I was about reboot the entire OS.
    Thank you ;

  52. howie
    December 31st, 2013 at 02:13 | #61

    thanks a lot, blessings. it workes like a charm. :)

  53. Dustin
    May 10th, 2014 at 14:40 | #62

    I have the BFE problem as it does not show up in services. Have exhausted all resources in Microsoft Community with no help.

    When I tried the “this link should work” I received the following:

    Cannot import C:\Users………\BFEWin764.reg
    Not all data was successfully written to the registry. Some keys are open by the system or other processes.

    Any ideas?

  54. Julie
    January 21st, 2015 at 21:16 | #64

    This might be a stupid question but if it won’t boot how do I get in to edit the registry?

    • January 22nd, 2015 at 09:45 | #65

      You need to boot to the recovery environment then run Regedit from the command prompt. You’ll need to load the target hive from the C: drive as a separate step. The whole process is more involved than I can cover in detail here but that’s the basic strategy.

  1. January 21st, 2012 at 22:13 | #1