BSOD error after Sophos safeguard Install. BEFLT.SYS error

[thomas159]

Hi,

I am getting a BSOD when using a laptop that has recently had sophos safeguard installed.

When using driver verfier it indicates that the error is caused by the BEFLT.sys file which is a safeguard file.

This is a standard image however used on hundreds of laptops and rarely does this error occur and usually goes once the laptop is re-image however this has come back on a freshly imaged laptop which has only had the xerox documate 262 drivers/software recently installed on it.

Any help much appreciated before I raise this with Sophos

Thanks

 

[Arc]

The BSOD is caused by Utimaco Safeware AG - a member of the Sophos Group.

fffff880`0a2a9108  fffff880`0100a44fUnable to load image \SystemRoot\System32\Drivers\cegaes2m.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://systemexplorer.net/file-database/file/cegaes2m-sys"]cegaes2m.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://systemexplorer.net/file-database/file/cegaes2m-sys"]cegaes2m.sys[/URL]
 cegaes2m+0xa44f

Description here: What is cegaes2m.sys ? | System Explorer

fffff880`0a2a9208  fffff880`00e2fb34*** WARNING: Unable to verify timestamp for [URL="http://systemexplorer.net/file-database/file/be_fltim-sys"]be_fltim.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://systemexplorer.net/file-database/file/be_fltim-sys"]be_fltim.sys[/URL]
 be_fltim+0x7b34

Description here: What is be_fltim.sys ? | System Explorer

Even when you enabled Driver Verifier, the same thing came out as the victim.

BugCheck C9, {23e, fffff880013ee9f0, fffff98002d6a820, 0}

*** WARNING: Unable to verify timestamp for [URL="http://systemexplorer.net/file-database/file/beflt-sys"]BEFLT.SYS[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://systemexplorer.net/file-database/file/beflt-sys"]BEFLT.SYS[/URL]
Probably caused by : [URL="http://systemexplorer.net/file-database/file/beflt-sys"]BEFLT.SYS[/URL] ( BEFLT+109f0 )

Description here: What is beflt.sys ? | System Explorer

So you know what is causing the issue; and how to get rid of the issue.

Had I been there, I would have uninstalled Sofos Safeguard.

 

[thomas159]

I did know it was Safeguard but was hoping you may be able to pin point what is conflicting with it.

Unfortunately we can't uninstall it but thanks for your help though!

 

[Arc]

Unfortunately we can't uninstall it but thanks for your help though!

In that situation you may expect those BSODs to continue.