Error for bfe.reg import

carleye,

...been attempting to fix our PC after a virus/malware repair

Do you remember its name, or have the repot of the tool used to detect it? If so, please post it.


Now, please use the Farbar Recovery Scan Tool Download
Select the version that applies to your system.
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.

When done, the tool produces a log, FRST.txt, on the Desktop.
Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply.


Also, move on to Downloading Farbar Service Scanner

Let's get a view of all services and dependencies scoped by the tool...

Make sure the following options are checked:
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender

Press: Scan

When done, FSS creates a log, FSS.txt, on the Desktop.
Please provide the FSS.txt in your reply.

Thank you.

carleye.

Aha! ZeroAccess came to visit your computer...

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

Code:

Start
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3313343369-3009874273-3512575399-1000\...\Run: [PMCRemote] => [X]
HKU\S-1-5-21-3313343369-3009874273-3512575399-1000\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-3313343369-3009874273-3512575399-1000\$70339cbe8081d6cd3c91fdbadba24b37\n. 
HR HKLM\SOFTWARE\Policies\Google: Policy restriction
C:\$Recycle.Bin\S-1-5-18\$70339cbe8081d6cd3c91fdbadba24b37
C:\$Recycle.Bin\S-1-5-21-3313343369-3009874273-3512575399-1000\$70339cbe8081d6cd3c91fdbadba24b37
C:\ProgramData\qd1qtbn.fee
C:\Users\hn68\AppData\Local\Temp\_isB634.exe
Defaulttab (HKLM-x32\...\DefaultTab) (Version: 2.4.8.2 - Search Results, LLC) 
File Type Assistant (HKLM-x32\...\Trusted Software Assistant_is1) (Version:  - Trusted Software) 
PDFssoftware Toolbar (HKLM-x32\...\PDFssoftware Toolbar) (Version: 6.10.2.5 - PDFssoftware)
Torch (HKCU\...\Torch) (Version: 2.0.0.2062 - Torch Media Inc.) 
Vittalia Installer (HKLM-x32\...\Vittalia) (Version: 1.0 - FILEWIN.net) 
Task: {E9A12218-9B80-4E7E-B806-D2DE3E1BE227} - System32\Tasks\DTReg => C:\Windows\system32\config\systemprofile\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe 
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST, and press the Fix button, just once, and wait.

When done, the tool creates a report on the Desktop called: Fixlog.txt
Please post the Fixlog.txt in your reply.


Since the following step involve editing the Registry, please create new restore point before proceeding:
System Restore Point - Create
Select: Option Two

Now, please download the ESET ServicesRepair tool:
Download > http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
Save to the Desktop.

Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder on the Desktop named: CC Support
Please provide the CC Support\Logs\SvcRepair.txt in your reply.

Next, please run the Farbar Service Scanner once again.

:at: Please provide the new FSS.txt in your reply.

carleye,

Please do the following...

Please download the following files and save them to your Desktop:
(Direct links only available)

BFE:
http://download.bleepingcomputer.com...ices/7/BFE.reg

MpsSvc:
http://download.bleepingcomputer.com...s/7/MpsSvc.reg

Now double-click on the BFE.reg file.
A prompt appears asking if you want to merge the information contained in the file into the Registry.
Confirm the prompt to merge to your Registry.
Click: OK

Please, do the same for MpsSvc.reg


Now, press the Windows key and the R key to open the Run prompt.
In the Open space, type: Regedit
Press: OK

When the Registry editor opens, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

Do this by clicking on the > to the left of each entry:
>HKEY_LOCAL_MACHINE
>SYSTEM
>CurrentControlSet
>services
BFE


When you reach the BFE key on the left pane (it looks like a folder), right-click on it, and click: Permissions

• In the Permissions for BFE prompt, click: Add
• In the Select Users or Groups prompt, in the area Enter the object name to select, type in: Everyone, and click: OK
• Click once on Everyone in the list at the top, and, in the Full Control row, check the following box: Allow
• Click OK to close the open windows, and restart the computer.

Now, once again, press the Windows key and R at the same time.
In the Run box, type: notepad
Press: OK

Highlight the entire contents inside the following quote box, and copy/paste the text to Notepad.

@Echo off
sc config bfe start= auto
sc config MpsSvc start= auto
net stop BFE
net start BFE
net stop MpsSvc
net start MpsSvc
shutdown /r /t 1
del %0

In Notepad, select File > Save as...
Press Desktop on the left side.
In the File name box, type in: fixsvc.bat
Press: Save
Close: Notepad

Right-click fixsvc.bat on the Desktop, and select: Run As Administrator
Press Yes if prompted by the User Account Control.

When the batch commands are applied, Windows restarts.


Last, run Farbar Service Scanner once again.
Select all the options.
Press: Scan

Please provide the new FSS.txt in your reply.

Please go to Start > Search programs and files (above Start)
In the search box, type: Command Prompt
Right click Command Prompt in the search results and select: Run as administrator

At the Command Prompt, please copy/paste (with mouse) the following:

SFC /scanfile=c:\windows\system32\bfe.dll

Press: Enter

If nothing is wrong, the following appears:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\windows\system32>SFC /scanfile=c:\windows\system32\bfe.dll

Windows Resource Protection did not find any integrity violations.
C:\windows\system32>

However, if the file is corrupted, allow SFC to repair it, and post the results.

Type Exit and press Enter to quit the Command Prompt.

Restart your computer.

Next, try merging BFE.reg once again.

If you still get the error, continue with the rest of the instructions anyway, and post the FSS.txt

I ran SFC and the file was not corrupted. Restarted, attempted the merge and hit the same error again (as in the original post).

*Oops, just saw the last sentence of your post. Will do and will repost.