Ask Leo! by Leo A. Notenboom

How do I turn off Data Execution Prevention errors?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Windows » Windows Configuration

Summary: Data Execution Prevention, or DEP, can prevent certain types of malware exploits. Unfortunately not all programs are compatible with DEP.

How do I get rid of Data Execution Prevention? Such a pain. It wouldn't allow me to view photos inside a photo folder ... I followed the route given by the "crash message" but I want it off my machine. Any ideas?

First let's be clear: Data Execution Prevention, or DEP, isn't something you "remove" or "get off your machine". It's simply a feature that can be turned on or off, or be configured.

I'll show you how to turn it off, but then I'll tell you why you shouldn't and what you should do instead to solve your problem.

What is DEP?

Start by realizing that as far as your computer is concerned, everything is just numbers. The text you're seeing? That's all stored as numbers with each number representing a different letter or character. Programs that you run? Numbers too: the instructions that tell the computer what to do are simply numbers.

From that example we can draw an important distinction: there's "code", or the instructions that tell a computer what to do, and there's "data", the information that the computer works on. But both code and data are stored as numbers.

Now, what hackers and virus writers have been able to do is exploit unpatched vulnerabilities that allow them to a) put what they want into data, and then b) trick the computer into executing that data as if it were code. That's one way they gain control of a machine and infect or otherwise compromise the machine.

Data Execution Prevention is exactly what it sounds like: the operating system, using either hardware, software or both, depending on the processor's capabilities, traps the attempt to execute data as if it were code. It's a very effective technique at blocking malware even if the vulnerability being exploited hasn't even been publicly exposed yet.

So what's the problem?

Some legitimate programs execute data as if it were code on purpose. Without getting into a lot of geeky details, it's sometimes an effective way to write very efficient code. If I'm not mistaken, older versions of Windows did something very similar to speed up graphics operations, for example. Since you mention viewing pictures, I'm guessing you were using an older version of IrfanView which was also known to do this.

Turning Off DEP

You can, if you like, turn off DEP completely.

  • Right click on My Computer

  • Click on Properties

  • Click on the Advanced tab

  • Click on the Settings button in the Performance section

  • Click on the Data Execution Prevention tab

At this point you should be looking at a dialog much like this one:

Data Execution Prevention Options

Select the item labeled "Turn on DEP for essential Windows programs and services only". This, effectively turns off DEP for everything else. Your image viewer should now work.

"If you have a program you know is legitimate that happens to cause DEP errors, you can add it to the list of exceptions."

But as I said at the beginning, in my opinion, this isn't what you should do.

Configure Exceptions to DEP

If you have a program you know is legitimate that happens to cause DEP errors, you can add it to the list of exceptions.

As you can see in the image above, the default DEP setting is to "Turn on DEP for all programs and services except those I select:". So, a much better way to get any legitimate program causing DEP errors to work again is to add that program to the exception list.

Click on the Add... button. Now, locate the program's ".exe" file. I don't happen to have IrfanView, but I'll use Foxit Software's PDF reader as a random example:

Specifying a DEP Exception

In this example the program was located in " C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe". The program you're looking for will, of course, be elsewhere, but most likely somewhere within "C:\Program Files".

The result should look something like this:

Data Execution Prevention Options with exception added

You can see that the program I specified has been added to the list of exceptions. It will not be protected by DEP, but everything else in your system will be.

That's a much safer way to run.

Related:

Helpful? Get new articles weekly by email in my FREE newsletter!

Your Name:
Your Email:


Why Subscribe?

Article C3053 - June 11, 2007

Was this article helpful? «Yes» «No»

Recent Comments
132 Comments

Very easy, simple instructions. When we got to the perfomance options page it listed google (we did not have to look for it) and we checked it off and now we can get google again. Thanks for your help.

Posted by: David at January 24, 2010 2:46 PM

Your suggestions did not work. I still cannot access my programs. This all started after I upgraded to IE 8. I HATE IE.

Posted by: Shannon at January 28, 2010 10:02 AM

I hate it. I closed DEP (through command prompt and notepad thingies) but still I can't access microsoft office. i'm afraid other of my programs will have that 'dep' too. also i can't rum bootstrapper in installing office. my pc is going useless. please help. ^_^ tnx.

Posted by: Eman at January 29, 2010 8:05 PM

Hi-Now im busy with this error-it close all my program i want an make my computer to useless-when i do that you said-its not work true for me :(
my IE is still can't open

Posted by: Mehdi at February 4, 2010 3:50 PM

This also happened to me after the DAMN IE 8 UPDATE. I HATE IE. IM TYpING THIS MESSAGE FROM MY PHONE NOW BECAUSE ALMOST ALL MY PROGRAMS ARE DEP! Firefox, Google chrome, and even IE close! Also the window error reporting closes due to dep! I've tried using the performance options to add the programs to the exceptions list but I can't, it says "this program MUST run with dep. You cannot turn off department for this program."
There is no explanation on fixing the security issue other than to simply add the program to the exceptions list...

Posted by: terence at February 8, 2010 7:27 PM

Post a comment on "How do I turn off Data Execution Prevention errors?":






(Email Address will not be published.)

Remember Me?

By popular demand...
my tip jar
Cuppa Joe
Buy Leo a Latte!

(you may use HTML tags for style)

RSS feed Subscribe to the RSS Feed specifically for comments on this article.

Before commenting, please...

  • Read the article at the top of this page. If your comment shows you didn't, it'll be deleted and ignored.

  • Comment only on this article. Use the Google search box at the top of the page if you have a question about something else.

  • Don't include personal information in the comment. No email addresses. No phone numbers. No physical addresses.

  • Don't spam. Excessive links to unrelated sites within a comment or across multiple comments will cause all such comments to be removed.

  • Don't ask me to recover lost passwords or hacked accounts. I can't, and those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...


Question? Ask Leo!