Blue screen error

[internetraver]

I've been trying to clean up a friends laptop which is pretty new but so infected with spyware and crap it doesn't hardly work. Anyway I can get it to boot in safe mode fine but after about one minute of booting up regular, I get a blue screen error and it restarts. The error reads this

stop: 0x0000008E (0xc0000005,0xEF1E9229, 0xF79B80D8, 0x00000000)

axxT64.Sys - Address EF1e9229 base at EF1E9000, Datastamp 436F796a


I was able to install Spysweeper and norton systemworks while in safe mode. The spysweeper ran and seemed to work ok, but I can't get norton to run at all. It goes to the activation screen and freezes everytime. The computer is a toshiba satellite a75-s206. Thanks

[glc]

What version of Windows is on there? That does not look like a Win9x/ME bluescreen to me.

That's a spyware or trojan file of some sort. It's not a legitimate Windows file. Get RID of Norton, in your situation it's going to do you more harm than good.

[internetraver]

It's windows xp, sorry I put it in the wrong area. So I should uninstall norton?

[glc]

Uninstall Norton - if you *can* - the Windows Installer service won't run in safe mode unless you start it manually. Then go browse our Security forum for some suggested tools to use to clean this thing up. I would start with booting it into safe mode with networking, and go do a Housecall online scan at Trend Micro.

[internetraver]

I've already tried to uninstall norton, but can't. Not in safe mode, and regular mode crashes before I have a chance. I'll try that housecall online when I get home later. Thanks

[internetraver]

I've been reading through the security forums and ran ad aware, spybot s&d, Hijack this. They each found some things which I fixed, but I'm still having problems. I can't get on the internet without it crashing so there's no chance of running housecall. Secondly, if I boot up in regular, a bunch of scanning email popups keep coming up. I think there must be some spyware or something sending stuff out of my computer. I first hooked this computer up at my house last night and today I got a email from time warner saying this




Please read this notification completely as it pertains to your Road Runner account. The master account holder should reply to this notification within 24 hours.



Time Warner High Speed Internet has received complaints regarding Unsolicited Email (SPAM) coming from the computer connected to your cable modem 0002.8A46.5CEC on 1/14/2006. These complaints have been investigated and logged. (Tickets #1743179 & 1745191) The headers from the email in question are included below. (Please be aware that your Road Runner email account is not involved in these complaints.)



It is highly likely that this incident is the result of an exploit that allows a third party to send email through your computer. Please act to secure your system from any exploits that may be responsible for this activity. Road Runner takes complaints of Spamming Abuse very seriously. Further substantiated complaints may, after review, lead to a disabling of your cable modem without further notification. This is for the protection of the Time Warner network as well as your system's security.



As the master account holder you are responsible for all traffic that is transmitted through your modem. There is some information included below about the most recent exploits that may help you with this problem. You should also seriously consider installing a firewall, which can help keep malicious users out of your system.



Please note that if the matter is not resolved, and we deem it appropriate to disable the modem, we may ask that you have your computer reformatted or professionally serviced before being reconnected.





Anyone got any ideas about what this is??

[doubledragon5]

Next best thing would be a clean install of the OS...

[internetraver]

Man, that's not what I really wanted to hear, but it sounds like this is going to be my only option left...