Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Error for bfe.reg import


04 May 2014   #1

Windows 7 Home Premium
 
 
Error for bfe.reg import

Hi, I have been attempting to fix our PC after a virus/malware repair: cleaning it up took bfe.reg with it (which I only discovered after peerblock wouldn't work). I've followed the instructions here:Win7 PB 1.1 Windows Services Not Running (PB will not start) but when I attempt to import or merge bfe.reg, the error in the attached screen cap appears. To check if it was widespread I merged other reg files with no problem.

I've run malwarebytes, spybot, tweaking. I've read about a million forums and tried multiple fixes. I'm just about to nuke and pave.

I'd really appreciate some advice. I've been working on this a lot of today and I might be missing something simple.



Attached Images
 
My System SpecsSystem Spec
.

04 May 2014   #2

Windows 7 Home Premium
 
 

carleye,

Quote:
...been attempting to fix our PC after a virus/malware repair
Do you remember its name, or have the repot of the tool used to detect it? If so, please post it.


Now, please use the Farbar Recovery Scan Tool Download
Select the version that applies to your system.
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.

When done, the tool produces a log, FRST.txt, on the Desktop.
Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply.


Also, move on to Downloading Farbar Service Scanner

Let's get a view of all services and dependencies scoped by the tool...

Make sure the following options are checked:
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender

Press: Scan

When done, FSS creates a log, FSS.txt, on the Desktop.
Please provide the FSS.txt in your reply.

Thank you.
My System SpecsSystem Spec
05 May 2014   #3

Windows 7 Home Premium
 
 

Quote:
Do you remember its name, or have the repot of the tool used to detect it? If so, please post it.
Sorry - no. I believe it was a ransomware that was the problem, but as everything *appeared* to be normal, I didn't realise the bfe was gone until I next tried to run peerblock. I can't be sure of the timeline or virus. We had a few positives around the same time and I don't remember specifics.

Quote:
Please provide the FRST.txt in your reply.
Also post the Addition.txt in your reply.
Done, these are attached.

Quote:
Please provide the FSS.txt in your reply.
Also done and attached.

Quote:
Thank you.
No, thank you


Attached Files
File Type: txt FRST.txt (53.8 KB, 9 views)
File Type: txt Addition.txt (47.5 KB, 3 views)
File Type: txt FSS.txt (2.9 KB, 2 views)
My System SpecsSystem Spec
.


05 May 2014   #4

Windows 7 Home Premium
 
 

carleye.

Aha! ZeroAccess came to visit your computer...

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt
Code:
Start
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3313343369-3009874273-3512575399-1000\...\Run: [PMCRemote] => [X]
HKU\S-1-5-21-3313343369-3009874273-3512575399-1000\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-3313343369-3009874273-3512575399-1000\$70339cbe8081d6cd3c91fdbadba24b37\n. 
HR HKLM\SOFTWARE\Policies\Google: Policy restriction
C:\$Recycle.Bin\S-1-5-18\$70339cbe8081d6cd3c91fdbadba24b37
C:\$Recycle.Bin\S-1-5-21-3313343369-3009874273-3512575399-1000\$70339cbe8081d6cd3c91fdbadba24b37
C:\ProgramData\qd1qtbn.fee
C:\Users\hn68\AppData\Local\Temp\_isB634.exe
Defaulttab (HKLM-x32\...\DefaultTab) (Version: 2.4.8.2 - Search Results, LLC) 
File Type Assistant (HKLM-x32\...\Trusted Software Assistant_is1) (Version:  - Trusted Software) 
PDFssoftware Toolbar (HKLM-x32\...\PDFssoftware Toolbar) (Version: 6.10.2.5 - PDFssoftware)
Torch (HKCU\...\Torch) (Version: 2.0.0.2062 - Torch Media Inc.) 
Vittalia Installer (HKLM-x32\...\Vittalia) (Version: 1.0 - FILEWIN.net) 
Task: {E9A12218-9B80-4E7E-B806-D2DE3E1BE227} - System32\Tasks\DTReg => C:\Windows\system32\config\systemprofile\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe 
end
NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST, and press the Fix button, just once, and wait.

When done, the tool creates a report on the Desktop called: Fixlog.txt
Please post the Fixlog.txt in your reply.


Since the following step involve editing the Registry, please create new restore point before proceeding:
System Restore Point - Create
Select: Option Two

Now, please download the ESET ServicesRepair tool:
Download > http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
Save to the Desktop.

Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder on the Desktop named: CC Support
Please provide the CC Support\Logs\SvcRepair.txt in your reply.

Next, please run the Farbar Service Scanner once again.

:at: Please provide the new FSS.txt in your reply.
My System SpecsSystem Spec
06 May 2014   #5

Windows 7 Home Premium
 
 

Quote:
Please post the Fixlog.txt in your reply.

Please provide the CC Support\Logs\SvcRepair.txt in your reply.

Please provide the new FSS.txt in your reply.
These are attached. Thanks again.


Attached Files
File Type: log SvcRepair.log (25.0 KB, 3 views)
File Type: txt FSS.txt (2.9 KB, 3 views)
File Type: txt Fixlog.txt (2.6 KB, 1 views)
My System SpecsSystem Spec
06 May 2014   #6

Windows 7 Home Premium
 
 

carleye,

Please do the following...

Please download the following files and save them to your Desktop:
(Direct links only available)

BFE:
http://download.bleepingcomputer.com...ices/7/BFE.reg

MpsSvc:
http://download.bleepingcomputer.com...s/7/MpsSvc.reg

Now double-click on the BFE.reg file.
A prompt appears asking if you want to merge the information contained in the file into the Registry.
Confirm the prompt to merge to your Registry.
Click: OK

Please, do the same for MpsSvc.reg


Now, press the Windows key and the R key to open the Run prompt.
In the Open space, type: Regedit
Press: OK

When the Registry editor opens, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

Do this by clicking on the > to the left of each entry:
>HKEY_LOCAL_MACHINE
>SYSTEM
>CurrentControlSet
>services
BFE


When you reach the BFE key on the left pane (it looks like a folder), right-click on it, and click: Permissions
  • In the Permissions for BFE prompt, click: Add
  • In the Select Users or Groups prompt, in the area Enter the object name to select, type in: Everyone, and click: OK
  • Click once on Everyone in the list at the top, and, in the Full Control row, check the following box: Allow
  • Click OK to close the open windows, and restart the computer.
Now, once again, press the Windows key and R at the same time.
In the Run box, type: notepad
Press: OK

Highlight the entire contents inside the following quote box, and copy/paste the text to Notepad.
Quote:
@Echo off
sc config bfe start= auto
sc config MpsSvc start= auto
net stop BFE
net start BFE
net stop MpsSvc
net start MpsSvc
shutdown /r /t 1
del %0
In Notepad, select File > Save as...
Press Desktop on the left side.
In the File name box, type in: fixsvc.bat
Press: Save
Close: Notepad

Right-click fixsvc.bat on the Desktop, and select: Run As Administrator
Press Yes if prompted by the User Account Control.

When the batch commands are applied, Windows restarts.


Last, run Farbar Service Scanner once again.
Select all the options.
Press: Scan

Please provide the new FSS.txt in your reply.
My System SpecsSystem Spec
07 May 2014   #7

Windows 7 Home Premium
 
 

When I tried to run BFE I got the same error message as in the original post. MpsSvc worked though.
My System SpecsSystem Spec
08 May 2014   #8

Windows 7 Home Premium
 
 

Please go to Start > Search programs and files (above Start)
In the search box, type: Command Prompt
Right click Command Prompt in the search results and select: Run as administrator

At the Command Prompt, please copy/paste (with mouse) the following:

Quote:
SFC /scanfile=c:\windows\system32\bfe.dll
Press: Enter

If nothing is wrong, the following appears:

Quote:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\windows\system32>SFC /scanfile=c:\windows\system32\bfe.dll

Windows Resource Protection did not find any integrity violations.
C:\windows\system32>
However, if the file is corrupted, allow SFC to repair it, and post the results.

Type Exit and press Enter to quit the Command Prompt.

Restart your computer.

Next, try merging BFE.reg once again.

If you still get the error, continue with the rest of the instructions anyway, and post the FSS.txt
My System SpecsSystem Spec
14 May 2014   #9

Windows 7 Home Premium
 
 

I ran SFC and the file was not corrupted. Restarted, attempted the merge and hit the same error again (as in the original post).

*Oops, just saw the last sentence of your post. Will do and will repost.
My System SpecsSystem Spec
14 May 2014   #10

Windows 7 Home Premium
 
 

Here's the FSS


Attached Files
File Type: txt FSS.txt (3.1 KB, 3 views)
My System SpecsSystem Spec
Reply

 Error for bfe.reg import




Thread Tools



Similar help and support threads for2: Error for bfe.reg import
Thread Forum
.bat reg import gives error accessing the registry General Discussion
Task Scheduler Import Error: 2,3 General Discussion
Import Pictures and Video Error Music, Pictures & Video
Error in import Backup and Restore
Solved Task Import Error 1,40 General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:08 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33