Various BSOD Problems

Hi there I have my PC for 3 years with 1 time formatted and no BSOD problems until 24 May. I guess some kind of exe triggered it. But I think it would be a malware due to rootkit (because after BSOD I scanned with combofix and it warned me) but there are no problems and rootkit is the work of activated Daemon Tools. I followed instructions given by TimW. And it seems to be my system doesn't have any rootkit(s) or malware(s). I have 3 BSOD's before. So there are the error files with order.

 

Do any of these SES (Stop Error Screens) occur in safe mode?

 

I don't opened my pc in safe mode. Should I try it is there any BSOD in safe mode?

Note: There is no file called awnyqfoc.sys on my PC. But last BSOD issue indicated that awnyqfoc.sys might causing problem.

The last BSOD (awnyqfoc.sys) occured when I scan with Gmer while Daemon Tools is deactivated (Because when it is activated windows gives error)

 

Yes, please try it out.

 

I can try it but there is a basic problem. I don't know how to trigger it again. I can give a try with Gmer scan but I'm not sure about it can give BSOD again

 

On startup, just after the BIOS completes POST, but before the XP loading window (with the scrolling dots) stars press F8 repeatedly. In the list that pops up choose Safe Mode.

 

Isn't that tutorial of opening pc in safe mode? If it is -I guess so- I'm doing it right away

 

Yes, it is.

 

I'm out of ideas about triggering BSOD. Gmer is not working on Safe Mode. And I don't know how to trigger it. Any ideas?

 

I really don't know what to do if there is BSOD on safe mode. Are there any ideas or suggestions for what to do? I'm really stuck:cry
And I want to solve my problem without formatting if possible

 

So GMER is triggering the SESs? Is this the only thing you know of that is?

What is GMER?

 

This is Gmer

SES? This word refers to sound in my language anyway

The story is:
I really don't know how BSOD triggered.
First BSOD occured a week ago. I've encountered it after opening a "suspicious" exe. I scanned it first but no malware and virus warnings. After opening it I got a message from windows and my pc immediately rebooted. After that I scanned with combofix, avast and malwarebytes (I don't know Daemon Tools gived rootkit error a week ago. But now I do) after all of this when I try to move my files in desktop I got another BSOD. I rebooted again and do the same thing again (moved my files from desktop to folder in desktop) and secınd BSOD occured again. Latest BSOD occured about 2 days ago. I know Gmer cleaner works only DTools deactivated. So I deactivated it and run a scan with it. I left my PC doing its work but when I came back I see BSOD again! The weird thing is last BSOD indicated that awnyqfoc.sys might be causing this. But there is no sys file called awnyqfoc.sys! This is really weird. I booted my PC in safe mode but Gmer not working on safe mode. So I'm really stuck and don't know what to do.

 

I really need help. Bad thing is what's next? What should I do next? There is no connection between BSODs one is StarForce Copy-Protection, One is about Windows I guess and the last one is a sys file which is not even exists in PC. :cry I really get the problem solved -if possible- without formatting my PC. Please tell me what should I do next? or tell me what to do. I'm really stuck and have no idea. I'm open for any solutions except formatting. And I really don't know what is triggered BSODs One important thing: I have never got these problems until last week.:confused So please tell me anything helpful to my problem:cry This problem really drives me crazy!

 

Thank you for posting. And I have 1 Ram its 1.00 GB. The links are the below are these for x32 and x64? Or they are compeletly different? Which one I should choose?

Important observion: I've detected a suspicious program in my taskbar. When PC opens a black square iconed program shows up for a little while and then it disappears. It said that it was MSN Live at first but it disappears after some seconds if I move pointer on it. Today I booted my PC and there are two ATI Hydravision icons! (I guess one is the black one) I moved my pointer but it disappeared again. Is there anyway to track this program? I know it could trackable via msconfig but I don't see a single thing suspicious

If you want I can give some screenshots from msconfig of mine.

 

Thanks again for the post. But the thing is I've done these steps before I posted a new thread in this section. But if you want to know what are the reports there are no malwares or viruses. So, what next?:confused

 

Preparing to Format

About the program I mentioned... Is there anyway to track itself? I know msconfig can do it too but there nothing seems suspected to me via msconfig. Its really strange thing.

Note:The program I mentioned shows up taskbar as a black square when PC opened. When I move mouse pointer on it with no program names it disappears...

PC seems working fine. But sometimes it really slows down. Since there are no ideas I'm started to backup my files before formatting it

My System Properties:
Windows XP Professional SP2
Intel Core 2 Duo CPU
E4500 @ 2.20GHz
2.19 GHz, 1.00 GB RAM

I followed Malware Cleaning steps but there is nothing about it.

I haven't ran a memtest if its results are needed I'll run a scan and post the results as soon as possible. And last one more thing is there any connection between BSOD's? I couldn't find a connection between them. The weird thing is last BSOD indicated a sys file which is not exists in my PC and the Net.

 

Gotcha!

I guess I found solution to my problem. I knew it its some kind of virus. I opened suspicious file with notepad. And I made a research. I found some clues and searched the net. Virus is created by a program called "virus maker". It's a trojan "Gen:Trojan.Heur.50649B8F8F". And look carefully on the chart:

Detections

a-squared - Nothing found!
Avira AntiVir - Nothing found!
Avast - Nothing found!
AVG - Nothing found!
BitDefender - Gen:Trojan.Heur.50649B8F8F
ClamAV - Nothing found!
Comodo - Nothing found!
Dr.Web - Nothing found!
Ewido - Nothing found!
F-PROT 6 - Nothing found!
G DATA - Nothing found!
IkarusT3 - Nothing found!
Kaspersky - Nothing found!
McAfee - Nothing found!
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Nothing found!
Norman - Nothing found!
Panda - Nothing found!
Quick Heal - Suspicious
Solo Antivirus - Nothing found!
Sophos - Mal/VB-F
TrendMicro - Nothing found!
VBA32 - Nothing found!
Virus Buster - Nothing found!

And I'm avast! user. Which means the file seems clear from the beginning. And I think that virus triggered BSOD problems too. I'll try to delete this virus. I'm really happy about solving the problem. And I'll thank the users who replied my thread.