Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 5 subscribers
  • Views 7277 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Beflt.sys Error at Boot

RJ_Shane

I have a machine running 5.50.8.13 that is bootlooping. When I disable automatic restart, I come to an error referencing the beflt.sys file.

I unlocked the drive and attempted to import the backed up MBR from the management center, but was told that the file is from the wrong machine. After quadruple-checking, I am certain that this is the correct machine and file. I tried to repair the MBR via scan, but receive a failure message after the full 30 minute scan. I checked the system registry for the disk signature and compared it to the disk signature for the existing encrypted partition, and they match.

So, at this point, I am at a loss for how to continue. Reimaging isn't an option and neither is pulling the HDD and attaching it to another machine for decrypt. Is there any way to bypass this file so that we can get Windows to load normally, at least long enough to uninstall the product?

:27787


This thread was automatically locked due to age.
Parents
  • 0

    Hi RJ_Shane,

    the BEFlt.sys is part of the SafeGuard Encryption subsystem and cannot be bypassed in case of a BSoD as it is required to read encrypted data - and is not related to the Master Boot Record, so there is not need to repair the Master Boot Record.

    A BSoD all of a sudden caused by BEFlt.sys is not very common and occurs most of the time after installation of a 3rd party application / driver that brings its own filter driver.

    - You could try to boot into Windows Boot menu and choose to go back to the last known good configuration / a system restore point that was taken at a time where the system was stable, but after it had been encrypted

    If that should not help, could you please post the exact BSoD stop code of the machine and check if you have installed any 3rd party applications (and post them if possible)?

    Regards,

    Chris

    :28299
Reply
  • 0

    Hi RJ_Shane,

    the BEFlt.sys is part of the SafeGuard Encryption subsystem and cannot be bypassed in case of a BSoD as it is required to read encrypted data - and is not related to the Master Boot Record, so there is not need to repair the Master Boot Record.

    A BSoD all of a sudden caused by BEFlt.sys is not very common and occurs most of the time after installation of a 3rd party application / driver that brings its own filter driver.

    - You could try to boot into Windows Boot menu and choose to go back to the last known good configuration / a system restore point that was taken at a time where the system was stable, but after it had been encrypted

    If that should not help, could you please post the exact BSoD stop code of the machine and check if you have installed any 3rd party applications (and post them if possible)?

    Regards,

    Chris

    :28299
Children
No Data
Unfiltered HTML