Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have DEP enabled on my Windows XP machine. I have seen the DEP dialog pop up on two occasions, once when running Blender and more recently when running Skype. I have no clue about whether these were virus attacks or valid program behaviour.

How do I decide when to allow a program to use Data Execution and when to prevent this from happening?

share|improve this question
    
Teh google is your friend! –  Jim Deville Nov 25 '09 at 8:54
add comment

1 Answer

DEP per se isn't actually a technique to prevent viruses or similar programs from running. All it does is—on supported hardware—to enable the NX bit for data pages. That means that a program can't execute its own data. This is simply a security measure and it mitigates or at least weakens some kinds of attack or misbehavior. At the expense of the program forcibly terminating, though.

In the case of Skype it may well be that Skype's own obfuscation techniques work against them. Also programs such as Just-in-time compilers have to write out program code that gets executed.

As an end-user it's not entirely possible to decide whether DEP was triggered by a legitimate action. It's probably safe to say that nearly all instances of DEP killing a program are false positives, especially since DEP on Windows XP can be bypassed by malicious programs with relative ease.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.