BSOD error after Sophos safeguard Install. BEFLT.SYS error

thomas159 · 18 Oct 2013

Hi,

I am getting a BSOD when using a laptop that has recently had sophos safeguard installed.

When using driver verfier it indicates that the error is caused by the BEFLT.sys file which is a safeguard file.

This is a standard image however used on hundreds of laptops and rarely does this error occur and usually goes once the laptop is re-image however this has come back on a freshly imaged laptop which has only had the xerox documate 262 drivers/software recently installed on it.

Any help much appreciated before I raise this with Sophos

Thanks

Arc · 18 Oct 2013

The BSOD is caused by Utimaco Safeware AG - a member of the Sophos Group.

Code:

fffff880`0a2a9108  fffff880`0100a44fUnable to load image \SystemRoot\System32\Drivers\cegaes2m.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cegaes2m.sys
*** ERROR: Module load completed but symbols could not be loaded for cegaes2m.sys
 cegaes2m+0xa44f

Description here: What is cegaes2m.sys ? | System Explorer

Code:

fffff880`0a2a9208  fffff880`00e2fb34*** WARNING: Unable to verify timestamp for be_fltim.sys
*** ERROR: Module load completed but symbols could not be loaded for be_fltim.sys
 be_fltim+0x7b34

Description here: What is be_fltim.sys ? | System Explorer

Even when you enabled Driver Verifier, the same thing came out as the victim.

Code:

BugCheck C9, {23e, fffff880013ee9f0, fffff98002d6a820, 0}

*** WARNING: Unable to verify timestamp for BEFLT.SYS
*** ERROR: Module load completed but symbols could not be loaded for BEFLT.SYS
Probably caused by : BEFLT.SYS ( BEFLT+109f0 )

Description here: What is beflt.sys ? | System Explorer

So you know what is causing the issue; and how to get rid of the issue.

Had I been there, I would have uninstalled Sofos Safeguard.

thomas159 · 18 Oct 2013

I did know it was Safeguard but was hoping you may be able to pin point what is conflicting with it.

Unfortunately we can't uninstall it but thanks for your help though!

Arc · 18 Oct 2013

thomas159 said:

Unfortunately we can't uninstall it but thanks for your help though!

In that situation you may expect those BSODs to continue.