Issue
- Installation is not successful: "Rolling back action"
- Base Filtering Engine is missing
Details
Click to expand
Additional error messages that may be connected to this solution include the following:
- Users may receive "ESET Personal firewall initialization failed" message
- Users may receive "Services not started" message
- Users may receive "Virus scanner initialization failed" message
A malware or exploit that is removing the Base Filtering Engine service is executing a Windows command (sc delete bfe) which causes the Base Filtering Engine to disappear after a restart. This does not appear to be an issue isolated to Win32/Sirefef but to multiple Rogue Antivirus applications. This is similar to when a Rogue Antivirus executes the attrib command to hide all files.
Solution
- Run the ESET uninstaller utility to remove partial installations
- Remove any existing antivirus solutions
- Run the ESET SirefefCleaner tool with the /r switch to restore the Base Filtering Engine
I. Run the ESET uninstaller utility to remove partial installations
-
Run the ESET uninstaller utility in Safe Mode with Networking to remove any remnants of previously installed ESET programs or partial installations that might have failed before attempting to install your new ESET product.
-
After removing any previous installations, install your new ESET product again.
II. Remove any existing antivirus solutions
For the successful installation of ESET products, it is important that no other antivirus products are installed on your computer.
-
Uninstall any antivirus software currently on your system. If you do not know if there is an antivirus product installed on your system, use the ESET A/V Removal tool to scan your system.
-
After removing any previous installations, install your new ESET product again.
III. Run the ESET SirefefCleaner tool with the /r switch to restore the Base Filtering Engine
-
Download the ESETSirefefCleaner tool.
-
Click Save. Choose the destination folder where the tool will be downloaded. It may also be automatically saved to your Downloads folder.
-
Click Start. Type
runand click Run. -
Type
C:\Users\%username%\Downloads\ESETSirefefCleaner.exe /r(whereCis your primary directory and%username%is your Windows username) and click OK. -
Click Yes at the User Account Control prompt.
-
Click Agree.
-
The tool will scan your system and close automatically if no threats are present. If a threat is found, follow the on-screen prompts to clean your system. You may be prompted to restart your computer manually after the tool finishes running.
-
After restarting your computer, install your ESET product again.
