data execution prevention-microsoft front page server administrator client

[pdudenhefer]

hi folks,
Im running XP pack 3 on a toshiba laptop satelite 85. While searching a sight on auto repairs I got a message pop up from my virus program(avira) telling me there was a virus in the page and did I want to deny access-I said yes and it popped up about 5-6 more times before I could click out of page. I thought by denying access the problem was solved but I ran malwarebytes and avira to be sure.Malware found nothing but avira found 2 viruses which I chose to quarantine.Avira told me I have to restart the computer to complete the action-which I did.When it rebooted and got to my desktop page there were no icons but a small window that said -to protect your computer data execution prevention has closed microsoft front page server administrator client-it gave me no choices except to click close then another window asked if I wanted to send this error to microsoft. I did.
I rebooted in safe mode and ran every virus program I have to no avail-I tried backdating to another save point but it kept saying it did not go back to that point so nothing has changed. I cant figure out where to go next so Im coming to the experts for help-HELP
thank you-Pete

[Geek-9pm]

Do you have a backup method?
At this point it would be a good idea of doing a backup, if yew can.

Other wise, reboot in safe mode. Open task manager & look for any process that might be bogus and stop it. Suspend all AV and spy ware blockers. Of course, you want to be off the network. Now run just one AV Scan program in Safe mode. Then reboot and tray again  with another Scanner.
If you can not get it this way, you will have to do a Hijack log.

But first try a scan in safe mode. Yeah, I know, some will tell you that it don't work that way. Yes, it does. Trust me on this.
I would go with MalwareBytes in safe mode.

[pdudenhefer]

hey geek
I dont have backup and I ran malwarebytes and avira virus cleaner in safe mode and they found nothing. I looked at task manager processes and they all look Greek to me-sorry. But I do have a popup alert that tells me I have a virus and starts scanning on its own from a site called bonuspromoofer.com.
I may have screwed up big time cuz I went to safe mode as admin and ran sysdm.cpl and made dep accept front page,rebooted and computer came on perfect again,so I started malwarebytes again and as soon as I did a popup came up and said you have a security prob.-do you want to scan for viruses and before I can react it goes to a scan page and starts scanning-I cannot stop it short of physically turning off the computer.
now I cannot even start in safe mode-it goes to user page and when I click my name it says loading and then jumps to saving settings and it wont go any farther.

[Geek-9pm]

At this point I do not have any advice.

The virus has taken over your system.

As for me,  I keep a backup install for this kind of panic. At this point I would handle it this way. I would use another HDD to boot Windows after making the original drive the slave. Then I would download recent versions of AV scanners and do FULL scans on the slave drive. Sometimes that works.

Others here would recommend doing a Hijack log.

[BW]

pdudenhefer -
  I cleaned it up today on a client's Compaq.  Same symptoms as you.  Go to <removed> and follow ALL the instructions to download, install, and run Combofix.  It did the trick.

BW

[BW]

PS - You can skip the Stopzilla install advert @ <removed>
BW

[evilfantasy]

Please do not send users to that website. It is not the official web site for ComboFix and we do not want users running ComboFix unless advised to do so by someone trained to use it.

Post it again and I will begin removing your posts and request that you are banned. See here > http://www.mywot.com/en/scorecard/combofixdownload.com

[pdudenhefer]

well evil fantasy what do you recommend-please.Right now it wont even let me get to safe mode-it comes on and goes off in 2 seconds-logs on then immediately logs off and saves settings
tried using repair disk and it started like it was gonna come on and then it did the same- sign on and off

[evilfantasy]

I'm not sure what to do if you can't log on.

You can try this.

Avira AntiVir Rescue System

* Download the Avira AntiVir Rescue System
* Place a blank CD in your burner and double-click on the downloaded file.
* The program will automatically burn the CD for you.
* Place the burned CD into the affected computer and start the computer with the CD in the CD tray.
* On the bottom left side of the screen there are 2 flags.  Using your mouse click on the British flag to use English.
* Click on the Configuration button.

- Select Scan all files
- Select Try to repair infected files and Rename files, if they cannot be removed
- Select Scan for dialers
- Select Scan for joke programs (Jokes)
- Select Scan for games
- Select Scan for spyware (SPR)

* Click on Virus scanner
* Click on Start scanner at the bottom of the screen

Currently the program does not support saving a log. Please write down the list of items for Records, Suspect files, and Warnings then post them back here.

[BW]

My bad. combofix.org is the good site, highly ranked by the reference you provided.

[pdudenhefer]

-I downloaded the rescue disk and tried to log on but it only got to opening page and then closed and saved my settings. It did this twice and then reverted to welcome user page,but when I click on my name it logs on and off by itself again. Im stymied.

[evilfantasy]

BW you did not link to combofix.org you linked to combofix.com - Can you read this? http://www.mywot.com/en/scorecard/combofixdownload.com

Still unless you are trained to use ComboFix and can show it then do not suggest it's use here. And then only use the official ComboFix web site which is neither combofix.org or combofix.com.

@ pdudenhefer - Try posting in the Windows forum. Maybe someone will have some ideas there.

[BW]

Yes I can read it and did.  That is why I suggested the .org vs. the .com site.  I have used combofix on well over 150 computers.  Thanks for your Avira suggestion.  I'm testing now on a machine that won't let combofix run.  It has similar symptoms to the first post.