Solved: Missing Base Filtering Engine in Windows 7
UPDATE 21 Jan 2012: If you are missing just BFE, the information below should be helpful. However, if you are missing BFE, Windows Firewall, Security Center and a couple of other services after a virus infection, you are going to need a more comprehensive security services fix. The second post by Farstrider (that starts “you can also try this:” works great. After getting the Norton 5013,3 error on yet another customer computer, I found this solution fixed the Norton problem without requiring me to reinstall the OS. HOWEVER, even still the Security Center service was still not starting, fixing that required me to download and run the Security Center registry entry from here (reboot afterward). Good Luck.
It looks like there is a virus now that can take out the Base Filtering Engine Service in Windows 7, and I suppose then in Vista and XP as well. I noticed this problem on a computer that I removed a virus from. Everything looked fine until I went to install Norton Antivirus and it barfed with an error message about Error “5013,3″. The instructions to fix the problem included restarting the Base Filtering Engine Service but oops, it wasn’t even there. As it turns out, the fix for this is easier than you might think.
The fix I used was to recreate the BFE service entry in the registry, which had been deleted. The registry entry that needs to be recreated is:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE
According to this Microsoft Technet article, you can just export the key from a working machine of the same OS and import it (just double click on the exported and moved .reg file) into the problem machine. I can tell you this absolutely worked like a charm for me.
WordPress won’t let me attach a copy of my Windows 7 x64 BFE entry, but if you need one, this link should work, otherwise leave a comment and I’ll try and mail it to you..

I could use a copy of the windows 7 x64 bfe entry…just in case. This problem has been bugging me for a week now…Your solution is the best one I’ve found so far.
if you dont mind can you send me a key? been trying to figure out how to solve the string of missing services.
I really need a copy of this I am having the sample problem with Norton 360 on Windows 7
I was able to recreate the service this way, but I then got an “Access Denied” error trying to start the service.
After looking around on some forums, I found a workaround — going to the HLKM\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy key, and modifying the Permissions on the key to add a user “NT Service\BFE” and give it Full Control. I’m not sure that’s the _right_ solution, but it allowed me to start the BFE service and the services that depend on it.
I’ve spent weeks on the internet trying to firgure this out. Pleaasse send me a copy…
Holy smokin’ smurfs!! Thank you a gazillion times over Adam Andrews. It may not be “perfectly right” but it works wonderfully well. I was going nutz. You’re a genius my friend.
@Adam Andrews
How do you get to the “HLKM\SYSTEM\CurrentControlSet\services\BFE\Parameters\Policy”? key
modifying the Permissions on the key to add a user “NT Service\BFE” and give it Full Control.
@Adam Andrews
How did you modify modify the Permissions on the key to add a user “NT Service\BFE” and give it Full Control?
@tr
@tom rizzo
Run regedit:
1. Browse to the location for the BFE service in the registry (HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy), right click and select permissions. (note: HKLM is short for HKEY_LOCAL_MACHINE_
2. In the “Permissions for Policy” window, click advanced | Add.
3. Once the “Select Users, Computers or Group” box appears, change the “From this location:” to point to the local machine name.
4. After changing the search location, enter “NT Service\BFE” in the “Enter the object name to select” box and click “Check names” – this will allow you to add the BFE account.
5. Give the following privileges to the BFE account:
Query Value
Set Value
Create Subkey
Enumerate Subkeys
Notify
Read Control
After adding the BFE account to the registry key, please try to start the Base Filtering Engine service.
Allan, I have Norton anti virus. My question, what happens if you have this virus? I don’t think I do. Thank you
@Adam Andrews
wow thank you very much for this info i was also going nuts because of this prob,now if is not much to ask can u also send me a copy? much appreciated!!!
hi ive been looking to solve this problem too. i keep getting the virus and the same error. please send key
I have tried all these things. It did get the BFE service back on my services list but I still get the access denied message. Any suggestions?
Is BFE starting automatically? What about Windows Firewall and Security Center Service? If any of these are not starting or missing, you’ve probably got an insurmountable problem. I haven’t seen it on Windows 7, but I had a Vista machine that had these services so fouled up, there was just no putting that Humpty together again. You may have/want to do a reinstall.
HOLY SH*T Thank you.
After hours trying of trying to get BFE to start, your advice proved successful.
I just want to say thank you for this guide. It have helped me and I have been able to restore what the virus Windows Internet Security 2012 damaged.
Thanks !
I solve it by:
1. run the Windows 7 x64 BFE entry .reg file.
2. run the Security Center registry entry .reg file.
3. Reboot.
4. Done
@Michael
It works! Awesome tip! Much thanks in saving me hours in troubleshooting this crap!
Thank you very much for your tip. You saved me from reinstalling Windows 7.
@Michael
THANK U! Had a PC w/ what I suspect was Security Center 2012 virus, couldn’t get Norton to install (missing BFE). Followed your steps and got BFE up and running by typing services.msc in the start menu and right clicking and selecting start. Now I can install norton A/V and do a full system scan. U DA MAN!
Thank you! I spent 3 full days trying to get this fixed! Finally something that worked!!!!!!!!
Many, many, many thanks for this invaluable advice…….. this wass one bloody annoying problem!!!!!
I’d buy you all a beer if I could! Cheers………………..
IPsec Policy Agent and IKE & AuthIPsec Keyring Modules error 1075: the dependency does not exist or has been marked for deletion. Also, the Base Filter Engine is not shown on the services prompt
please help
This was huge. SUCH A GREAT HELP!!!
Thank you once again – worked for me!!!!
thank u v.v.v.v much dude.. it’s gone.. now my lappi not giving 5013,3 error…
great help dude…
Glad that it worked. And say hello to India for us, we lived and worked in Gurgaon for a while several years ago. We had the times of our lives.
I received the same message. I cannot access my computer via smart mode and system repair does not find aany errors on the system. What can I do?
I assume by “Smart Mode” you mean “Safe Mode”. If you can’t boot the computer, then you’ve got bigger problems than missing the BFE. You don’t give enough information to really provide any specific advice. Hopefully you’re getting a blue screen at boot time, if so, use the error message in that and Google your heart out.
Just wanted to add my thanks. Had to combine adding the registry key with modifying the permissions as Adam Andrews suggested. Many thanks!
Thank you very much.
This has happened to me twice in the history of W7 x64
I found this post the 2nd time.
I hope others can find it as easily.
Adam Andrews you are are stealy eyed rocket man.
Thanks for the fix, worked perfect.
I’m only a teenager and I’ve had this problem on my computer for months. I don’t really understand everything said above, could someone talk me through it step by step from “Start” please?
@Adam Andrews
Andrew you are genius man – spent the entire work trying to start my Windows FIREWALL. I even called McAfee Technical Support who gave me some wff executable which was rejected and removed by their own McAfee – well it didn’t help.
Then I stumbled on this post and I didn’t even have to recreate the BFE service entry in the registry like what the admin suggested. Just straight created the “NT Service\BFE” account because I was getting a ‘denied’ error. Genius Andrew, God bless you man!
@Jigga
Sorry I meant to say “…spent the entire week…”
thanks big help
Man, this worked excellent.
Thanks a lot !!
dude …u totally rock
i wantd bfe to hav my idm on google chrome..n it workd..
O, my…. following Adams formula into the wild + heretofore unknowns I got to Step 2 ” Permission for Policy” clicked advanced, then add— and a box came up to say ” Unable to display the user selection dialog. Class not registered”…. of course I’m not even sure why I’m doing this… except somehow to escape the blue screen ( c1000135) + repair circle madness….
anyway– any ideas?
many thanks !
Thank You….Only dependency not starting is the base filtering engine which … “Windows could not start the base filtering service on Local Computer.
i get to the point of starting BFE under servic status, but my computer tells me it cant start on local computer and service is denied error 5. but my computer isnt local. what do i do?
This is the best piece of solution on google i must say . Thank you all for your inputs .
Works like a charm.
Thanks, I’m glad we got your sorted!
Hi, Thanks this worked for me too.
Thanks again!
@Adam Andrews
Thank you my friend I actually gave up for a while…………it worked like a charm
worked like monster
thaaaaaaaaaaaaan x @Adam Andrews
I am having the same problem and couldn’t find the BFE file…went to the HLKM\SYSTEM\CurrentControlSet\services\ guess what…no BFE file there either. HELP!
Please read this post again carefully, it has the answer to your question.
ok…so I got it to work to get the BFE back but it says access denied when I try to start it…what now?
Had the same issue and one of the fix here worked for me
http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/5366225a-46e7-4d6c-a389-8bd18a5c3aad
Cheers
A trojan called “zeroaccess” informed me that my computer was locked for violating FBI restrictions re. illegal downloads. The message on my screen told me that I could simply send them [?] $200 via Green Dot or supply my credit or debit card information. Supposedly this was to forego any additional prosecution. Ya, Right! I have Norton and AVG installed but apparently the virus damaged Norton and removed the Windows Base Filtering Engine. AVG stopped and quarantined the virus on a restart. I reinstalled the Norton Security Suite and used your provided download (BFE.etc) as instructed. Thank you.
You’re very welcome. Make sure you have real-time scanning turned off on AVG, it will mess up the real-time scanning of Norton (and can lock-up your computer at some random time). Personally, Id uninstall it altogether as I don’t think it really adds anything to the Norton protection.
Ha! Now I know what happened, but I’m afraid I will have to re-install Windows, anyway. I got as far as the Check User or Group box, but when I click Check Names, it comes up with a dialogue box that says “The following object is not from a domain listed in the Select Location dialogue box, and is therefore not valid: NT Services\BFE. I’m a little peeved because I’ve had Trend for years, and have never had a virus slip through before.
I’m not a fan of Trend, although they have had good results lately. Alas, there is no A/V that prevents all infections.
This fix worked like a charm!! Thank you!
Imported the BFE registry entry, and restarted my laptop. And walahhh, BFE Service is now there and it is running, including IKE and IPsec Services which could not start prior because BFE was gone. Brillant!! Thanks again, you saved me.
Thanks for this detailed resolution. Following the steps provided I was able to get my neighbor’s laptop up and working again. I know enough to not make registry modifications without specific instructions. Your information provided this.
I’m glad this helped. Good advice on editing the registry.
i already have bfe installed but how can i run it into safe mode ?
I’m not sure why you want to start it in Safe Mode, what would that prove? Here’s a way to do it though: http://www.krisdavidson.org/2010/09/11/starting-services-in-safe-mode/