Vista - Unable to uninstall programs due to Data Execution Protection

05-01-2008

Greg - I'll probably provide information of which you may be aware. Again -
DEP is provided via hardware - AMD processors with NX feature and Intel
processors with the XD (Execute disable feature).
If hardware DEP is not avaiable, Vista and XP SVC PK2 utilize software
DEP -applications must be written to utilize DEP. Not all platforms
(computers) support DEP.

Although "NX" is a specific feature of select AMD processors, Intel
processor equipped computers will
acknowledge BCDedit.exe commands involving NX as completed successfully (Bug
?).

Also "Physical Address Extension" (PAE) mode must be enabled for DEP to be
active. To the best of my knowledge, functioning software DEP cannot be
completely "turned off" (Registry hack?).
Unavailable options (Greyed out) via Control Panel indicate DEP is not
functional on that computer(?).

Have you contacted the software manufacturer?

Sorry I could not be more specific in addressing your problem!

"GregCoppedge" <GregCoppedge@xxxxxx> wrote in message
news:32BDB7F2-DC6D-46C3-9114-45A722C613BA@xxxxxx

Quote:

> Thanks, AJR. I agree that the DEP serves a very useful purpose in
> protecting
> the machine from the buffer overflow type attacks. It seems on my PC,
> though, that I can't control it anymore. When I go through the Control
> Panel, the DEP window is all grayed out with both the radio buttons
> unselected. I'm not able to set DEP on or off. Earlier I was using the
> command line interface using the commands: bcdedit.exe /set {current} nx
> AlwaysOn OR ... AlwaysOff
>
> Any ideas?
> --
> Greg Coppedge
>
>
> "AJR" wrote:
>

Quote:

>> Data Execution Prevention (DEP), UAC and ReadyBoost are generally not
>> understood well.
>>
>> Major techniques in exploiting Windows are via buffer overflow (CodeRed
>> Worm). DEP reduces risk of buffer overflow attacks by designating
>> sections
>> of memory for data or code only.
>>
>> The OS will not run code in memory designated for data - DEP (hardware
>> based) with Kernel Patch Protection is a major security provider in 64
>> bit
>> OS.
>>
>> In 32 bit versions DEP is software based and availability depends upon
>> the
>> processor. It is enabled by default and, by default, protects only
>> essential Windows programs and services - you can protect other programs
>> and
>> services
>>
>>
>> "GregCoppedge" <GregCoppedge@xxxxxx> wrote in message
>> news:1FF3A32F-8FA4-4F23-8CD6-EF9F3DD93848@xxxxxx

Quote:

>> > Recently installed a video converters (Stoik Video Converter).
>> > However,
>> > when
>> > I try uninstalling it, I receive the following message, "Setup.exe has
>> > stopped working". After I close the dialog window, I see a popup on
>> > the
>> > task
>> > bar that says Setup.exe was closed due to Data Execution Prevention.
>> > Kind
>> > of
>> > frustrating that I can't even uninstall the program. Error details
>> > below:
>> >
>> > Problem signature:
>> > Problem Event Name: BEX
>> > Application Name: setup.exe_InstallShield (R)
>> > Application Version: 10.50.0.125
>> > Application Timestamp: 4178b4a2
>> > Fault Module Name: StackHash_4a9e
>> > Fault Module Version: 0.0.0.0
>> > Fault Module Timestamp: 00000000
>> > Exception Offset: 008d08e0
>> > Exception Code: c0000005
>> > Exception Data: 00000008
>> > OS Version: 6.0.6000.2.0.0.768.3
>> > Locale ID: 1033
>> > Additional Information 1: 4a9e
>> > Additional Information 2: 236f2a1c65038fb7ca5862ccab73aabe
>> > Additional Information 3: 7f6a
>> > Additional Information 4: a44f06ddc95f9aed1c0e8b4741db58d8
>> >
>> > Looked across several forums and haven't found any answer to this type
>> > of
>> > question. Any help would be appreciated!
>> > --
>> > Greg Coppedge

>>
>>
>>

05-01-2008	#11 (permalink)
AJR n/a posts	Re: Unable to uninstall programs due to Data Execution Protection Greg - I'll probably provide information of which you may be aware. Again - DEP is provided via hardware - AMD processors with NX feature and Intel processors with the XD (Execute disable feature). If hardware DEP is not avaiable, Vista and XP SVC PK2 utilize software DEP -applications must be written to utilize DEP. Not all platforms (computers) support DEP. Although "NX" is a specific feature of select AMD processors, Intel processor equipped computers will acknowledge BCDedit.exe commands involving NX as completed successfully (Bug ?). Also "Physical Address Extension" (PAE) mode must be enabled for DEP to be active. To the best of my knowledge, functioning software DEP cannot be completely "turned off" (Registry hack?). Unavailable options (Greyed out) via Control Panel indicate DEP is not functional on that computer(?). Have you contacted the software manufacturer? Sorry I could not be more specific in addressing your problem! "GregCoppedge" <GregCoppedge@xxxxxx> wrote in message news:32BDB7F2-DC6D-46C3-9114-45A722C613BA@xxxxxx Quote: > Thanks, AJR. I agree that the DEP serves a very useful purpose in > protecting > the machine from the buffer overflow type attacks. It seems on my PC, > though, that I can't control it anymore. When I go through the Control > Panel, the DEP window is all grayed out with both the radio buttons > unselected. I'm not able to set DEP on or off. Earlier I was using the > command line interface using the commands: bcdedit.exe /set {current} nx > AlwaysOn OR ... AlwaysOff > > Any ideas? > -- > Greg Coppedge > > > "AJR" wrote: > Quote: >> Data Execution Prevention (DEP), UAC and ReadyBoost are generally not >> understood well. >> >> Major techniques in exploiting Windows are via buffer overflow (CodeRed >> Worm). DEP reduces risk of buffer overflow attacks by designating >> sections >> of memory for data or code only. >> >> The OS will not run code in memory designated for data - DEP (hardware >> based) with Kernel Patch Protection is a major security provider in 64 >> bit >> OS. >> >> In 32 bit versions DEP is software based and availability depends upon >> the >> processor. It is enabled by default and, by default, protects only >> essential Windows programs and services - you can protect other programs >> and >> services >> >> >> "GregCoppedge" <GregCoppedge@xxxxxx> wrote in message >> news:1FF3A32F-8FA4-4F23-8CD6-EF9F3DD93848@xxxxxx Quote: >> > Recently installed a video converters (Stoik Video Converter). >> > However, >> > when >> > I try uninstalling it, I receive the following message, "Setup.exe has >> > stopped working". After I close the dialog window, I see a popup on >> > the >> > task >> > bar that says Setup.exe was closed due to Data Execution Prevention. >> > Kind >> > of >> > frustrating that I can't even uninstall the program. Error details >> > below: >> > >> > Problem signature: >> > Problem Event Name: BEX >> > Application Name: setup.exe_InstallShield (R) >> > Application Version: 10.50.0.125 >> > Application Timestamp: 4178b4a2 >> > Fault Module Name: StackHash_4a9e >> > Fault Module Version: 0.0.0.0 >> > Fault Module Timestamp: 00000000 >> > Exception Offset: 008d08e0 >> > Exception Code: c0000005 >> > Exception Data: 00000008 >> > OS Version: 6.0.6000.2.0.0.768.3 >> > Locale ID: 1033 >> > Additional Information 1: 4a9e >> > Additional Information 2: 236f2a1c65038fb7ca5862ccab73aabe >> > Additional Information 3: 7f6a >> > Additional Information 4: a44f06ddc95f9aed1c0e8b4741db58d8 >> > >> > Looked across several forums and haven't found any answer to this type >> > of >> > question. Any help would be appreciated! >> > -- >> > Greg Coppedge >> >> >>
My System Specs

Similar Threads
Thread	Forum
Data Execution Protection - wth?	Vista performance & maintenance
Data Execution Protection is invincible	Vista performance & maintenance
Data Execution Protection problems	Vista General
Unable to uninstall programs (Not the same as others)	Vista account administration
DVD Maker and Data Execution Protection (DEP)	Vista music pictures video