About Windows 2008 "Data Execution Prevention"

By default, "Data Execution Prevention(DEP)" have been Enabled by windows 2008 RTM, and the default configuration is "Turn on DEP for all programs and services except those I select", and the list for emple.

Tonight, I scanning my computer by NOD32 2.7, then i receive an error that "NOD32 Kernel Service STOP WORKING". I open the EVENT VIEWER, a new record for the APPLICATION ERROR is "Faulting application nod32.exe, version 2.70.39.0, time stamp 0x46440fce, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x04101190, process id 0xfa0, application start time 0x01c8ac5df2415f9e."

So, what is the DEP?

By windows XP SP2(& Table PC Edition), Windows 2003, See:

http://support.microsoft.com/kb/875352

http://technet.microsoft.com/en-us/library/bb457155.aspx

For chinese, DEP means:

"数据执行保护 (DEP) 是一种有助于防止您的计算机免受病毒和其他安全威胁破坏的安全功能。有害的程序可能会通过试图运行（也称为执行）为 Windows 和其他已授权程序保留的系统内存位置中的代码，尝试攻击 Windows。这些类型的攻击可能会损害您的程序和文件。

DEP 可以通过监视程序确保这些程序使用的系统内存是安全的来保护您的计算机。如果 DEP 注意到计算机上的某个程序使用的内存不正确，则它将关闭该程序并通知您。"

 

Why my NOD32 feedback error?
Because when the anti-virtus application scanning my local files, it is will locked the system files, then scanning deep. By windows 2008 default, the DEP is "Turn on DEP for all programs and services except those I select" selected, so windows 2008 will protect all the system files like security system. So NOD32 scanning the system files, DEP will stopping it with active, then I will receive the Application Error by system.

How to fix it?

Just Right-check the Computer, then select the Properties, check the Advanced system settings. In the system Properties, click the Advanced Tab, In de Performance diagbox, Check Settings button. With the Performance Options, then check the Data Execution Prevention tab, you will find the blank setting zone. then select the "Turn in DEP for essential Windows Programs and services only", Windows 2008 will protecting itself normal.