BAse Filtering Engine Access Denied Error 5

[Malnutrition]

The tool is made to be ran from desktop. If this tool is able to start your fire wall we can add a batch file to the windows start up that will start it with each boot. Trying to see what errors are thrown, we may need to add dependent services to the batch. This will be a last resort if the all in one tool fails.

[thiisnacc]

The tool is made to be ran from desktop. If this tool is able to start your fire wall we can add a batch file to the windows start up that will start it with each boot. Trying to see what errors are thrown, we may need to add dependent services to the batch. This will be a last resort if the all in one tool fails.

Alright just to make sure:

1. Download both repair tool and Powerrun in Normal mode.
2. Move both Powerrun and Repair tool to desktop?
3. open command prompt and type those commands → take pic
4. reboot in safe mode to use repair tool?

Is this the order of operation? Am I leaving anything out?

[Malnutrition]

Download both repair tool and Powerrun in Normal mode.

Correct.

Move both Powerrun and Repair tool to desktop?

Power run will need to be moved to desktop and unzipped. The all in one tool will create a desktop icon when installed, and you will only need to drag that onto power run to start it.

open command prompt and type those commands → take pic

Yes, this needs to be done prior to running the all in one tool.

reboot in safe mode to use repair tool?

Yes, this will be the last thing you do. You may just let that tool run when you are ready it may take an hour to run…

[thiisnacc]

Correct.

Power run will need to be moved to desktop and unzipped. The all in one tool will create a desktop icon when installed, and you will only need to drag that onto power run to start it.

Yes, this needs to be done prior to running the all in one tool.

Yes, this will be the last thing you do. You may just let that tool run when you are ready it may take an hour to run…

Microsoft Windows [Version 10.0.19044.1526]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>net start mpsdrv
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

C:\WINDOWS\system32>net start bfe
The Base Filtering Engine service is starting.
The Base Filtering Engine service could not be started.

A system error has occurred.

System error 5 has occurred.

Access is denied.

C:\WINDOWS\system32>net start MpsSvc
System error 1068 has occurred.

The dependency service or group failed to start.

C:\WINDOWS\system32>sc config mpsdrv start=auto
[SC] OpenService FAILED 5:

Access is denied.

C:\WINDOWS\system32>sc config bfe start=auto
[SC] OpenService FAILED 5:

Access is denied.

C:\WINDOWS\system32>sc config MpsSvc start=auto
[SC] OpenService FAILED 5:

Access is denied.

C:\WINDOWS\system32>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>sc queryex bfe

SERVICE_NAME: bfe
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 5 (0x5)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>sc queryex mpsdrv

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>

Question: Why did I need to open powerrun with cmd to execute those commands

[Malnutrition]

Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.

[thiisnacc]

Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.

I gave you the wrong report I didnt know powerrun had its own cmd. Here goes the other:

Microsoft Windows [Version 10.0.19044.1526]
(c) Microsoft Corporation. All rights reserved.

C:\Users\User\Desktop\PowerRun\PowerRun>net start mpsdrv
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

C:\Users\User\Desktop\PowerRun\PowerRun>net start bfe
The Base Filtering Engine service is starting.
The Base Filtering Engine service could not be started.

A system error has occurred.

System error 5 has occurred.

Access is denied.

C:\Users\User\Desktop\PowerRun\PowerRun>net start MpsSvc
System error 1068 has occurred.

The dependency service or group failed to start.

C:\Users\User\Desktop\PowerRun\PowerRun>sc config mpsdrv start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc config bfe start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc config MpsSvc start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex bfe

SERVICE_NAME: bfe
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 5 (0x5)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex mpsdrv

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>

[thiisnacc]

Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.

So now run that tool in safe mode twice?

[Malnutrition]

Yes, once thru power run. Then check the issue, if the issue is still there, then run it as admin.

I have a few other ideas we can try, just the all n one tool may be the easier option at this point.

[Malnutrition]

I am signing off for the night, let me know how the all in one tool works for you.

Tommorow, once you are back into normal mode. After running the all in one tool I suggest a full scan with Kaspersky.
Disable Defender …
Download and run a full scan with the Kaspersky Virus Removal tool.
Accept the terms.
Click Change Parameters.
Select the System drive.
All volumes.
Click OK, start Scan.

    [IMG alt="Capture.PNG"]https://pchelpforum.net/attachments/capture-png.9392/

[Malnutrition]

If the above fails.

Then download PCHunter from here.
Unzip it to your desktop.
Drag and drop onto RunX or powerrunx64
After the program starts.
Go to startup info tab.
Then services.
Right click BFE
Select image path properties.
Select security tab.
Select your user name.
Edit permissions.
Select yourself again.
Give yourself full control put a tick in that box.
Hit Apply.
[COLOR=rgb(184, 49, 47)]
[COLOR=rgb(184, 49, 47)]Repeat the above for BFE under the Service Dll Properties.

Repeat this step for the MpsSvc service.
Under image path and service dll properties.

Then start the services using the commands here. In post number 42[/COLOR][/COLOR]

[thiisnacc]

Yes, once thru power run. Then check the issue, if the issue is still there, then run it as admin.

I have a few other ideas we can try, just the all n one tool may be the easier option at this point.

[ATTACH type=“full”]9486[/ATTACH]
what next? what am I leaving out if anything?

[thiisnacc]

Ok.
Let’s do this…

---

FRST Fix.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

---

Step2:
ZHP cleaner Scan.
Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.
Once you have started the program, you will need to click the scanner button.
The program will close all open browsers!
Once the scan is completed, the you will want to click the Repair button.
At the end of the process you may be asked to reboot your machine.
After you reboot a report will open on your desktop.
Attach the report here in your next reply.

---

Step 3:
ZHP Diag Scan Click here to download.
Save to your desktop.
Right Click Run as Admin.
Click the Options button.
Click on Check All
Then click close.
Click the Scanner button.
When complete please push the report button.
A notepad will open… attach the report in your next reply.

---

As far as adware cleaner, right click run as admin, if nothing is found then run the basic repair.

[ATTACH type=“full” alt=“Capture.PNG”]9449[/ATTACH]

What happened to this plan too? Can this not work anymore?

[Malnutrition]

what next? what am I leaving out if anything?

Have you run the all in one tool n safe mode and rebooted?

What happened to this plan too? Can this not work anymore?

We can still use FRST to fix things, just let me know how the all in one tool has worked for you.

[thiisnacc]

Have you run the all in one tool n safe mode and rebooted?

We can still use FRST to fix things, just let me know how the all in one tool has worked for you.

No I havent ran it is the screenshot ok?

[Malnutrition]

Yes, screen shot is good. Run it in safe mode thru powerrunx64 with the option of all boxes checked.