Tag Info

Hot answers tagged

7

Very interesting question. I've seen some DEP faults from cscript.exe before. It's annoying. VBScript predates DEP in Windows, and as such it was not originally developed with DEP in mind. Furthermore when you start interacting with old, third-party COM and OLE interfaces in your scripts, they can cause NX faults and cscript.exe takes the blame for it. The ...


4

Configuration Description OptIn This setting is the default configuration. On systems with processors that can implement hardware-enforced DEP, DEP is enabled by default for limited system binaries and programs that "opt-in." With this option, only Windows system binaries are covered by DEP by default. OptOut DEP is enabled by default for all processes. ...


2

Something titled 'Project1' would throw a red flag at me. Usually that would be a string that you would change when creating a program. Perhaps it was made in VB6. My suggestion would be, unless your team created it, get rid of it. I say that because of the erie resemblance to this case.


2

Try editing the application path below and importing it: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers] "C:\\Program Files\\MyApp\\MyApp.exe"="DisableNXShowUI" Edit: Just checked on a Server 2008 install I have and that is how the Nagios client is handling the DEP issue with ...


1

Yes, the Application event log will show an Error entry with Event ID = 1000. In my experience, events with exception ID 0xc0000005 (STATUS_ACCESS_VIOLATION) are often indicative that the application is not compatible with DEP. Application developers should be aware of DEP behavior in user mode. A user-mode DEP exception results in a ...


1

Naveen - Is it the application that you have written, which is being shut down by DEP? If so, have you recently updated the application in any way, or were there no changes to it at the time this problem began? If it's a change in the code that you have made, that started all of this off, then you need to read up on what DEP is and how it works, and take ...


1

The first thing I would do in this situation is to run Microsoft's Malicious Software Removal Tool. This should detect the most common malware infections. You can do this by just typing "mst.exe" in the "Run" box or in a commandline console. Read further details on this Serverfault question: Some questions about the Microsoft Windows Malicious Software ...


1

For question 1: I think this difference is caused by the backdoors that Microsoft has put into hardware DEP for OptOut, according to Fabrice Roux (see below). In the case of IrfanView, for which Steve Gibson observed the same difference as I did for UltraEdit (see the question), the difference is caused by a non-DEP aware EXE packer (ASPack) that Microsoft ...


1

Setting the System DEP Policy level to OptOut allows for any 32bit thread to call SetSystemDEPPolicy(0) which will disable DEP protection for the memory space allocated to that process. If the system's DEP Policy is set to AlwaysOn, invocations of SetSystemDEPPolicy will throw an error.



Only top voted, non community-wiki answers of a minimum length are eligible