• Valid program

    BFE.DLL Information

    This is a valid program that is required to run at startup.

    This program is required to run on startup in order to benefit from its functionality or so that the program will work. The following information is a brief description of what is known about this file. If you require further assistance for this file, feel free to ask about in the forums.

  • Name
    Base Filtering Engine
  • Filename
  • Command
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
  • Description
    The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

    This is a service launched by the legitimate C:\Windows\System32\svchost.exe program. The actual executable file for the Base Filtering Engine service is C:\Windows\System32\bfe.dll.

    It should not be disabled unless the computer does not use a software firewall or IPSEC services.
  • File Location
  • Startup Type
    This startup entry is installed as a Windows service.
  • Service Name
  • Display Name
    Base Filtering Engine
  • HijackThis Category
    O23 Entry
  • Note
    %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
  • This entry has been requested 25,152 times.


It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search Startups
HijackThis Startup Categories


Remember Me
Sign in anonymously