Solved BAse Filtering Engine Access Denied Error 5

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Status
Not open for further replies.
Malnutrition said:
It's made a small step...

Code: 
========= sc config bfe start=auto =========

[SC] ChangeServiceConfig SUCCESS

========= End of CMD: =========


========= sc config MpsSvc start=auto =========

[SC] ChangeServiceConfig SUCCESS

========= End of CMD: =========

Download and install the All in one repair tool, reboot into safe mode.
Drag the All in one repair tool onto Powerrunx64 after you download and unzip to your desktop.
Run the All in one tool with all items ticked.

Reboot and check the issue.
Click to expand...
Download while in safe mode?
 
No. download in normal mode.

First... open Runx64 and click on the command prompt and type or copy and paste the following and tell me what errors you get.
Hit enter after each.


Capture.PNG


net start mpsdrv
net start bfe
net start MpsSvc

Then....

sc config mpsdrv start=auto
sc config bfe start=auto
sc config MpsSvc start=auto

Then......

sc queryex mpssvc
sc queryex bfe
sc queryex mpsdrv
 
Last edited:
Malnutrition said:
It's made a small step...

Code: 
========= sc config bfe start=auto =========

[SC] ChangeServiceConfig SUCCESS

========= End of CMD: =========


========= sc config MpsSvc start=auto =========

[SC] ChangeServiceConfig SUCCESS

========= End of CMD: =========


View attachment 9474

Download and install the All in one repair tool, reboot into safe mode.
Drag the All in one repair tool onto Powerrunx64 after you download and unzip to your desktop.
Run the All in one tool with all items ticked.

Reboot and check the issue.
Click to expand...
So download both Powerrun and the repair tool in normal mode, Move to safe mode and execute with Powerrun, correct?
 
Yes. First I'd like to see what errors you get when trying to start each service, prior to running the all in one tool. :)

So first download and unzip power run to your desktop and execute the commands listed. Screen shot the errors or type them out.
 
  • Like
Reactions: thiisnacc
Malnutrition said:
No. download in normal mode.

First... open Runx64 and click on the command prompt and type or copy and paste the following and tell me what errors you get.
Hit enter after each.


View attachment 9475


net start bfe
net start mpsdrv
net start MpsSvc

Then....

sc config mpsdrv start=auto
sc config bfe start=auto
sc config MpsSvc start=auto

Then......

sc queryex mpssvc
sc queryex bfe
sc queryex mpsdrv
Click to expand...
Also Does it matter If I put it on my desktop this time or just run it?
 
The tool is made to be ran from desktop. If this tool is able to start your fire wall we can add a batch file to the windows start up that will start it with each boot. Trying to see what errors are thrown, we may need to add dependent services to the batch. This will be a last resort if the all in one tool fails.
 
Malnutrition said:
The tool is made to be ran from desktop. If this tool is able to start your fire wall we can add a batch file to the windows start up that will start it with each boot. Trying to see what errors are thrown, we may need to add dependent services to the batch. This will be a last resort if the all in one tool fails.
Click to expand...
Alright just to make sure:
1. Download both repair tool and Powerrun in Normal mode.
2. Move both Powerrun and Repair tool to desktop?
3. open command prompt and type those commands -> take pic
4. reboot in safe mode to use repair tool?

Is this the order of operation? Am I leaving anything out?
 
thiisnacc said:
Download both repair tool and Powerrun in Normal mode.
Click to expand...
Correct.

thiisnacc said:
Move both Powerrun and Repair tool to desktop?
Click to expand...

Power run will need to be moved to desktop and unzipped. The all in one tool will create a desktop icon when installed, and you will only need to drag that onto power run to start it.
thiisnacc said:
open command prompt and type those commands -> take pic
Click to expand...

Yes, this needs to be done prior to running the all in one tool.
thiisnacc said:
reboot in safe mode to use repair tool?
Click to expand...
Yes, this will be the last thing you do. You may just let that tool run when you are ready it may take an hour to run...
 
Malnutrition said:
Correct.



Power run will need to be moved to desktop and unzipped. The all in one tool will create a desktop icon when installed, and you will only need to drag that onto power run to start it.


Yes, this needs to be done prior to running the all in one tool.

Yes, this will be the last thing you do. You may just let that tool run when you are ready it may take an hour to run...
Click to expand...
Microsoft Windows [Version 10.0.19044.1526]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>net start mpsdrv
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\WINDOWS\system32>net start bfe
The Base Filtering Engine service is starting.
The Base Filtering Engine service could not be started.

A system error has occurred.

System error 5 has occurred.

Access is denied.


C:\WINDOWS\system32>net start MpsSvc
System error 1068 has occurred.

The dependency service or group failed to start.


C:\WINDOWS\system32>sc config mpsdrv start=auto
[SC] OpenService FAILED 5:

Access is denied.


C:\WINDOWS\system32>sc config bfe start=auto
[SC] OpenService FAILED 5:

Access is denied.


C:\WINDOWS\system32>sc config MpsSvc start=auto
[SC] OpenService FAILED 5:

Access is denied.


C:\WINDOWS\system32>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>sc queryex bfe

SERVICE_NAME: bfe
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 5 (0x5)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>sc queryex mpsdrv

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\WINDOWS\system32>

Question: Why did I need to open powerrun with cmd to execute those commands
 
Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.
 
Malnutrition said:
Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.
Click to expand...
I gave you the wrong report I didnt know powerrun had its own cmd. Here goes the other:

Microsoft Windows [Version 10.0.19044.1526]
(c) Microsoft Corporation. All rights reserved.

C:\Users\User\Desktop\PowerRun\PowerRun>net start mpsdrv
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Users\User\Desktop\PowerRun\PowerRun>net start bfe
The Base Filtering Engine service is starting.
The Base Filtering Engine service could not be started.

A system error has occurred.

System error 5 has occurred.

Access is denied.


C:\Users\User\Desktop\PowerRun\PowerRun>net start MpsSvc
System error 1068 has occurred.

The dependency service or group failed to start.


C:\Users\User\Desktop\PowerRun\PowerRun>sc config mpsdrv start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc config bfe start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc config MpsSvc start=auto
[SC] ChangeServiceConfig SUCCESS

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex bfe

SERVICE_NAME: bfe
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 5 (0x5)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>sc queryex mpsdrv

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Users\User\Desktop\PowerRun\PowerRun>
 
Malnutrition said:
Gives higher privileges. Apparently something is denying access, this tool or Runx is meant to bypass that. Since this failed, then go ahead with the all in one repair tool. Sometimes it needs to be ran twice, so run it thru powerrunx64 then reboot and run it as admin and reboot.
Click to expand...
So now run that tool in safe mode twice?
 
Yes, once thru power run. Then check the issue, if the issue is still there, then run it as admin.

I have a few other ideas we can try, just the all n one tool may be the easier option at this point.
 
  • Like
Reactions: thiisnacc
I am signing off for the night, let me know how the all in one tool works for you.

Tommorow, once you are back into normal mode. After running the all in one tool I suggest a full scan with Kaspersky.
Disable Defender .....
Download and run a full scan with the Kaspersky Virus Removal tool.
Accept the terms.
Click Change Parameters.
Select the System drive.
All volumes.
Click OK, start Scan.


Capture.PNG
 
  • Like
Reactions: thiisnacc
If the above fails.

Then download PCHunter from here.
Unzip it to your desktop.
Drag and drop onto RunX or powerrunx64
After the program starts.
Go to startup info tab.
Then services.
Right click BFE
Select image path properties.
Select security tab.
Select your user name.
Edit permissions.
Select yourself again.
Give yourself full control put a tick in that box.
Hit Apply.

Repeat the above for BFE under the Service Dll Properties.

Repeat this step for the MpsSvc service.
Under image path and service dll properties.

Then start the services using the commands here. In post number 42
 
Last edited:
  • Like
Reactions: thiisnacc
Malnutrition said:
Yes, once thru power run. Then check the issue, if the issue is still there, then run it as admin.

I have a few other ideas we can try, just the all n one tool may be the easier option at this point.
Click to expand...
1649543764274.png

what next? what am I leaving out if anything?
 
Malnutrition said:
Ok.
Let's do this....
FRST Fix.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.




Step2:
ZHP cleaner Scan.
Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.
Once you have started the program, you will need to click the scanner button.
The program will close all open browsers!
Once the scan is completed, the you will want to click the Repair button.
At the end of the process you may be asked to reboot your machine.
After you reboot a report will open on your desktop.
Attach the report here in your next reply.

Step 3:
ZHP Diag Scan Click here to download.
Save to your desktop.
Right Click Run as Admin.
Click the Options button.
Click on Check All
Then click close.
Click the Scanner button.
When complete please push the report button.
A notepad will open... attach the report in your next reply.


As far as adware cleaner, right click run as admin, if nothing is found then run the basic repair.

View attachment 9449
Click to expand...
What happened to this plan too? Can this not work anymore?
 
Yes, screen shot is good. Run it in safe mode thru powerrunx64 with the option of all boxes checked.
 
Status
Not open for further replies.
Top Bottom