http://kb.eset.com/esetkb/index?page=content&id=SOLN2861&locale=en_US

I receive the message that my ESET installation ended prematurely

KB Solution ID: SOLN2861|Last Revised: May 03, 2013

Issue

  • "ESET Smart Security installation was ended prematurely"
  • Installation is not successful: "Rolling back action"
  • Base Filtering Engine is missing

Users may receive one of the following messages:

  • "ESET Personal firewall initialization failed"
  • "Services not started"
  • "Virus scanner initialization failed"
  • "The computer has not been restarted after a program uninstallation. Please restart the computer and run the installer again."
  • "An error occurred while starting services. Analysis of application protocols (POP3, HTTP) will not function"

Important!

This solution applies to Windows Vista and Windows 7 users only.

Details

  • A malware or exploit that is removing the Base Filtering Engine service is executing a Windows command (sc delete bfe) which causes the Base Filtering Engine to disappear after a restart. This does not appear to be an issue isolated to Win32/Sirefef but to multiple Rogue Antivirus applications. This is similar to when a Rogue Antivirus executes the attrib command to hide all files.

Solution

I. Verify that the Base Filtering Engine is missing

  1. Click Start, type services.msc into the search field and then click services.

Figure 1-1

  1. Look for the Base Filtering Engine entry in the "Name" field, which is sorted alphabetically.

Figure 1-2
Click the image to view larger in new window

  1. If the Base Filtering Engine entry is present, please provide an installation error log to Customer Care to help resolve your issue. If the Base Filtering Engine entry is missing, follow the instructions from Part II below.

II. Reinstall the Base Filtering Engine

  1. Download the ESET ServicesRepair utility and save it to your Desktop.
  2. Double-click ServicesRepair.exe to run the ESET ServicesRepair utility. If you are using User Access Control, click Run when prompted and then click Yes when asked to allow changes.

Figure 2-1

  1. Follow the prompts to repair the Base Filtering Engine service. Once the ServicesRepair utility finishes running click Yes to restart your computer.

Figure 2-2

 

    1. Once your computer restarts, install your ESET product using the instructions from the appropriate Knowledgebase article below:

  1. ESET Smart Security Users only: Because the ESET ServicesRepair utility restores the Windows Firewall to on by default, you will need to disable the Windows Firewall to prevent conflicts with the ESET Personal Firewall. For instructions on how to disable the Microsoft Windows Firewall, click the link that corresponds to your operating system from the links below:


If after restoring the Base Filtering Engine and running the ServicesRepair tool you are still unable to complete installation your computer may be infected with Sirfef malware. Visit the following Knowledgebase article for illustrated instructions to remove Sirfef: