HardwareHeaven.com

HardwareHeaven.com

Looking for the skin chooser?
 
 
  • Home

  • Hardware reviews

  • Articles

  • News

  • Tools

  • Gaming at HardwareHeaven

  • Forums

 

Go Back   HardwareHeaven.com > Forums > Software / Tools > Windows XP / 2000 / NT / 9x Forum


Windows XP / 2000 / NT / 9x Forum Discussion for Windows operating systems from XP right back to the very beginnings!

Reply
 
Thread Tools
Old Mar 25, 2005, 08:25 AM   #1
TJ-
DriverHeaven Extreme Member
 
TJ-'s Avatar
 
Join Date: Oct 2004
Location: Infinity
Posts: 3,679
Rep Power: 0
TJ- is on a distinguished road

exclamation What could cause this ?

9 times out of then when i restart my computer i get this messase when windows loads. Data Execution Prevention is turned on.




What program would cause DEP to keep pooping up like this, ive recently done a fresh install and got all the same programs i had before...





Quote:
Data Execution Prevention (DEP) helps prevent damage from viruses and other security threats that attack by running (executing) malicious code from memory locations that only Windows and other programs should use. This type of threat causes damage by taking over one or more memory locations in use by a program. Then it spreads and harms other programs, files, and even your e-mail contacts. Unlike a firewall or antivirus program, DEP does not help prevent harmful programs from being installed on your computer. Instead, it monitors your programs to determine if they use system memory safely. To do this, DEP software works alone or with compatible microprocessors to mark some memory locations as "non-executable". If a program tries to run code—malicious or not—from a protected location, DEP closes the program and notifies you. DEP can take advantage of software and hardware support. To use DEP, your computer must be running Microsoft Windows XP Service Pack 2 (SP2) or later, or Windows Server 2003 Service Pack 1 or later. DEP software alone helps protect against certain types of malicious code attacks but to take full advantage of the protection that DEP can offer, your processor must support "execution protection". This is a hardware-based technology designed to mark memory locations as non-executable. If your processor does not support hardware-based DEP, it's a good idea to upgrade to a processor that offers execution protection features.
__________________
new sig comming soon

Last edited by battleaxe187; Mar 25, 2005 at 09:01 AM.
TJ- is offline   Reply With Quote


Old Mar 25, 2005, 09:33 AM   #2
Member
 
Join Date: Mar 2003
Posts: 5,989
Rep Power: 71
PangingJr is just really nicePangingJr is just really nicePangingJr is just really nicePangingJr is just really nice

http://www.hardwareheaven.com/showpost...9&postcount=11
PangingJr is offline   Reply With Quote
Old Mar 25, 2005, 09:40 AM   #3
HardwareHeaven Extreme Member
 
The_Neon_Cowboy's Avatar
 
Join Date: Dec 2002
Location: U.S.A.
Posts: 16,009
Rep Power: 92
The_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the rough
System Specs

Did it happen just once?

its your built in CPU virus protection that protects a way of acessing memory thats fequently used by worms to hijack a PC and use it to spread / propagate. So it could be a simple as an error or an innocent older program or web page scripte / java / vbs script.. that may or may not be acting properly...

could easily just be an error
__________________
The_Neon_Cowboy is offline   Reply With Quote
Old Mar 25, 2005, 10:35 AM Threadstarter Thread Starter   #4
TJ-
DriverHeaven Extreme Member
 
TJ-'s Avatar
 
Join Date: Oct 2004
Location: Infinity
Posts: 3,679
Rep Power: 0
TJ- is on a distinguished road

no cowboy it happens almost everytime i restart, strange that it doesnt hapeen everytime...Why would it happen now, cause i got all the same programs as i had before....actually i just rememberd i got Tune up utilites 2004, but thats not in the startup group

This help you out Cntrl-ALT-Del

__________________
new sig comming soon
TJ- is offline   Reply With Quote
Old Mar 25, 2005, 10:52 AM   #5
HardwareHeaven Extreme Member
 
The_Neon_Cowboy's Avatar
 
Join Date: Dec 2002
Location: U.S.A.
Posts: 16,009
Rep Power: 92
The_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the rough
System Specs

read what Ctrl-Alt-Del posted 1st



the image is self explanitory if you want to play with that.... sdhould let you disable the program with a problem but I don't know much about it


you could try uninstalling any stuff you've loaded 1 at a time and reboot
and see if the problem goes away... so you can figure out what programs doing it....
and avoid it
__________________
The_Neon_Cowboy is offline   Reply With Quote
Old Mar 25, 2005, 10:58 AM Threadstarter Thread Starter   #6
TJ-
DriverHeaven Extreme Member
 
TJ-'s Avatar
 
Join Date: Oct 2004
Location: Infinity
Posts: 3,679
Rep Power: 0
TJ- is on a distinguished road

yea ive done all that ages ago neon, ive read up of disabeling tha dep but its a form of security so i dont wanna mess with it...

i also tired adding the Tune up utilities executables to the ignore list but same problem

nice diagrams though
__________________
new sig comming soon
TJ- is offline   Reply With Quote
Old Mar 25, 2005, 12:06 PM   #7
Member
 
Join Date: Mar 2003
Posts: 5,989
Rep Power: 71
PangingJr is just really nicePangingJr is just really nicePangingJr is just really nicePangingJr is just really nice

Quote:
Originally Posted by battleaxe187

This help you out Cntrl-ALT-Del

[IMAGE]--->://img.photobucket.com/albums/v610/battleaxe187/24085fce.jpg[/Image
Quote:
Originally Posted by Ctrl-Alt-Del
your XP (and every XPs) will have more than one "Generic Host Process for Win32 Services" (or listed on the Windows Task Manager as "svchost.exe") running at same time. the svchost.exe handles processes executed from DLLs, in each svchost.exe may have more than one service running within it, some of the 3rd party services (programs) can also be running within this process.

the error produced by the DEP could be due from one of the underlying services, either Windows's service(s) or 3rd party service(s).

my advice would be, try locating all the services that are running in each svchost.exe, you can do this by using a program call 'Process Explorer' (from sysinternals.com)

-or-

go to Start ->Run -> type CMD, and then press ENTER.
then type tasklist /SVC, and ENTER.

click on the icon on the upper left corner of the CMD window,
then select Edit ->Select all, then Edit ->Copy and post.

note-- the tasklist displays a list of active processes.
and the /SVC switch shows the list of active services in each process.

and then post all the active services that are running in the svchost.exe.
will check it out after that.


---

to workaround and to stop the DEP warning for the service (program),
either turn off the DEP or to set to apply DEP to all programs and services or to add an exception for the program. BUT i don't recommend you to use this workaround as of yet, until we can find the actual cause of the problem. let's determine the cause of the problem first.

--
how to get the info using the 'Process Explorer'.....,
R-click on each "Svchost.exe" and select Properties,
and click on Services tab. and post the list of active services in each Svchost.exe process. this info would be same as you running the tasklist /SVC in the CMD window.
PangingJr is offline   Reply With Quote
Old Mar 25, 2005, 01:26 PM   #8
DriverHeaven Junior Member
 
Join Date: Mar 2005
Location: Pontefract,West Yorkshire
Posts: 36
Rep Power: 0
2800@2.5ghz is on a distinguished road

i get that exact same message on startup, tho not as often
__________________
AMD 2800+Barton@2.5ghz 1.95v/Epox 8RDA6+Pro/Radeon 9800pro O'ced @ 411/351 / 120gb S-ATA Maxtor D'Max+9 \ 2x512 Corsair XMS PC3200CL2-dual channel \ pioneer DVDRW-107/Lian Li PC-7

[color=navy]Water Setup>>>Maze3>>>Eheim1250>>>Black Ice Extreme>>>Panaflow120mm@2400rpm[/color]
2800@2.5ghz is offline   Reply With Quote
Old Mar 25, 2005, 02:22 PM   #9
...just bummin 'round
 
Join Date: Oct 2004
Posts: 2,907
Rep Power: 112
[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute[hobo]eclipse has a reputation beyond refute
System Specs

does dat say u got 38 processes runnin? seems a lil much, y not disable sum autostarted progs then turn off any non essntial services, blackviper.com will let ya know which to turn off, especialy if yer only runnin 512 megs a ram
[hobo]eclipse is offline   Reply With Quote
Old Mar 25, 2005, 10:20 PM Threadstarter Thread Starter   #10
TJ-
DriverHeaven Extreme Member
 
TJ-'s Avatar
 
Join Date: Oct 2004
Location: Infinity
Posts: 3,679
Rep Power: 0
TJ- is on a distinguished road

Quote:
Originally Posted by [hobo]eclipse
does dat say u got 38 processes runnin? seems a lil much, y not disable sum autostarted progs then turn off any non essntial services, blackviper.com will let ya know which to turn off, especialy if yer only runnin 512 megs a ram
pretty much everyting is turned off except anitvirus, sound,ati, cpu monitor...
on startup i uasally got 32 processes.

Quote:
Originally Posted by Ctrl-Alt-Del
how to get the info using the 'Process Explorer'.....,
R-click on each "Svchost.exe" and select Properties,
and click on Services tab. and post the list of active services in each Svchost.exe process. this info would be same as you running the tasklist /SVC in the CMD window.
I tried running the command window, all it gives me when i type tasklist /SVC is:


"takslist" is not recognised as an internal command, operable program or batch file.


here is a list of the properties>services...




__________________
new sig comming soon
TJ- is offline   Reply With Quote
Old Mar 25, 2005, 11:19 PM   #11
Member
 
Join Date: Mar 2003
Posts: 5,989
Rep Power: 71
PangingJr is just really nicePangingJr is just really nicePangingJr is just really nicePangingJr is just really nice

all those services are belonged to Windows. still talking about viruses/spywares, and then hardware problems which's no good at all. read through these posts, and check your Event logs. will get back to you. later. http://groups-beta.google.com/group/...rch+this+group

and this...
http://groups-beta.google.com/groups...=Search+Groups
PangingJr is offline   Reply With Quote
Old Mar 25, 2005, 11:38 PM   #12
Member
 
Join Date: Mar 2003
Posts: 5,989
Rep Power: 71
PangingJr is just really nicePangingJr is just really nicePangingJr is just really nicePangingJr is just really nice

Quote:
Originally Posted by battleaxe187
except anitvirus
go off line, and "uninstall" the AV program using Add/Remove.
and reboot a couple of times and see if the error still showing up. if it does, re-install the AV program.
no need to clean registry, nor tweak your Windows even more, you don't want anything else interfering when troubleshooting. all the tweaks can be done at later time. and don't worry about the virus for now. you would want to find the actual cause of this error first.
PangingJr is offline   Reply With Quote
Old Mar 26, 2005, 12:09 AM Threadstarter Thread Starter   #13
TJ-
DriverHeaven Extreme Member
 
TJ-'s Avatar
 
Join Date: Oct 2004
Location: Infinity
Posts: 3,679
Rep Power: 0
TJ- is on a distinguished road

Quote:
Originally Posted by Ctrl-Alt-Del
go off line, and "uninstall" the AV program using Add/Remove.
and reboot a couple of times and see if the error still showing up. if it does, re-install the AV program.
no need to clean registry, nor tweak your Windows even more, you don't want anything else interfering when troubleshooting. all the tweaks can be done at later time. and don't worry about the virus for now. you would want to find the actual cause of this error first.
i really dont think its my antivirus, ive used this AV many times before on many computers and never had a problem.(Avast4.6pro). Although, before i reinstalled windows i was having problmes with Kaspersky AV. It would not run because it would tell me it was being used by another user, which is impossible since im the only user, and that was straight on reboot. BUt i thought a fresh install would solve that.

With the tune up utilites 2004, ive cleaned out registry and defraged it, could that cause problems? I did the same on my laptop and not having any problems there. Also in thse posts people are experiencing it when installing printer drivers, i got no printer installed.

I disabelld all of my startup programs and didnt get the message after i rebooted 3 times. Enabled the ones i need again, rebooted and didnt get the message...

I went through the event logs, and noting out of the ordinary there, how do i get to the boot log files, they dont seem to be in the event logs.?

Also done adware/spyare AV scan and all is cleen

You think this is a virus? i hope not
__________________
new sig comming soon

Last edited by battleaxe187; Mar 26, 2005 at 12:42 AM.
TJ- is offline   Reply With Quote
Old Mar 26, 2005, 05:56 AM   #14
Member
 
Join Date: Mar 2003
Posts: 5,989
Rep Power: 71
PangingJr is just really nicePangingJr is just really nicePangingJr is just really nicePangingJr is just really nice

i understand you've reformated and reinstalled the Windows many times before, so i think, by now, you know very well of how to backup your files, transfer your settings, and whatever about reformatting your Windows system, it can easily be done again any time. i'm not worry about this at all, and you shouldn't either,
since the installed Windows is no good until the problem has been fixed, another word, as of now it's not a stable OS if you still can not find/fix the problem...

the installed Windows has to be a very stable OS, at the default settings first, and then at any point from before-and-after you've made any change to it, this including registry tweaks, install 3rd party softwares, install new hardwares (and install a new driver for the hardwares).

the AV that you've installed is easy to remove/reinstall/update and if you do that, it would not cause any more problem to the Windows. but instead this can rule out the possibility...

as for registry cleaner, when you're having problem with a software installation will be the only time that you would need to use a good registry cleaner (not to use it to do an auto registry cleaning, but, to help you finding the registry entries that may cause the installation problem). otherwise, you'll not need to use registry cleaner in XP. i've seen and resolved many registry problems, sometimes i can tell after reading the questions that, the caused of these problem are in registry, something is missing or corrupted entries in there, import this/that reg files and the problem is solved, but, no registry cleaner can/will fix the problem. i've sometimes thought, the registry cleaner was the one that causes those problems, and it can't/won't help or too late for it to help you, even its un-do is presented. however, there's no sign, that directly indicates a registry problem in your case problem, but it's hard to tell, really.

i don't really know atm, what exactly causes the problem?
but you're not happy about having this problem, that's for sure,
so keep working on it and update. for both of us. later.
PangingJr is offline   Reply With Quote
Reply

Thread Tools