Environment:

Dell PowerEdge 1650 Intel Pentium III - 512MB
Windows 2000 server, Service pack 3 with latest Microsoft patches.

Problem:

I updated my antivirus software merak mail server integrated antivirus with AVAST32Antivirus engine then updated my avg antivirus software and it required a system reboot. Afterwards, the system kept rebooting itself with the blue screen of death in each time.

Solution tried so far::
1. Invoked the last known good option from the start up. Did not work.
2. Booted in safe mode successfully, when I looked in the event viewer the system log was corrupted.
3. Disabled event log service and renamed the system.evt file in Winnt\system32\config. Event viewer system log recovered.
4. Tried normal boot up again same error.
5. Looked into event viewer system log the following error message appeared.
Error: Service Control Manager.

Boot start or system start driver
Awlegacy.sys
MRXSMB
NETBIOS
NETBT
RASACED
6. Tried to disable most services like the antivirus and removed most program from windows start-up Run registry key. Reboot the system same error.
7. Boot in safe mode again and restored the system data from previous day backup successfully. Reboot in normal mode again same error.
8. It cannot be any device driver problem because the only devices on it are the two NIC cards and they are fine

With this my day ended

What to do next?

Google search on file Awlegacy.sys and found out to be a Pcanywhere legacy driver, located Winnt\system32\Drivers

Spoken to a friend who suggested that updating virus software using pcanywhere could cause havoc.

Now, I’m confident that if I remove pcanywhere from the system. It will solve the problem.

Have I missed anything?

Any help will be gratefully appreciated.