Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Data Execution Prevention


  • Please log in to reply
5 replies to this topic

#1 Juha

Juha

  • Members
  • 512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:09:31 PM

Posted 28 February 2008 - 08:35 PM

Hi...

I have been having some problems with my laptop for the last few days, from Win32 infection to two broken keys on my keyboard!

This is my latest:

I keep on getting this message:

Data Execution Prevention- Microsoft Windows

To help protect your computer, Windows has closed the program

Name: Run a DLL as an app
Publisher: Microsoft Corporation

[Close Message]

After closing the message I get:

Run a DLL as an app

Run a DLL as an App has encountered a problem and needs to close. We are sorry for the inconvenience(!)

Error Signature:

EventType : BEX P1 : rundll32.exe P2 : 5.1.2600.2180 P3 : 41107dbc
P4 : uxtheme.dll P5 : 6.0.2900.2180 P6 : 411096bb P7 : 00001821
P8 : c0000005 P9 : 00000008

After closing message this followed:

Microsoft Management console has encountered a problem and needs to close...

EventType : BEX P1 : mmc.exe P2 : 5.1.2600.2180 P3 : 41107b0f
P4 : shell32.dll P5 : 6.0.2900.3241 P6 : 47216027 P7 : 000273b0
P8 : c0000005 P9 : 00000008

Then FREEEZE... Nothing responds... Can't bring up even task manager.

Had to press the OFF switch and restart.

And again a similar 'Data Execution Prevention' message as I type this... This time (To help protect my computer again it seems) Windows has closed this program:

Name: Generic Host Process for Win32 Services
Publisher: Microsoft Corporation

And I haven't pressed 'Close Message' yet lest everything freezes!

I checked the Event viewer and these are some of the recent errors recorded:

1)
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 29/02/2008
Time: 00:58:24
User: N/A
Computer: JUHA
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module dnsapi.dll, version 5.1.2600.2938, fault address 0x0000347e.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

2)
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 29/02/2008
Time: 00:45:15
User: N/A
Computer: JUHA
Description:
Faulting application rundll32.exe, version 5.1.2600.2180, faulting module uxtheme.dll, version 6.0.2900.2180, fault address 0x00001821.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

3)
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 29/02/2008
Time: 00:44:45
User: N/A
Computer: JUHA
Description:
Faulting application mmc.exe, version 5.1.2600.2180, faulting module shell32.dll, version 6.0.2900.3241, fault address 0x000273b0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

4)
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 29/02/2008
Time: 00:34:17
User: N/A
Computer: JUHA
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module dnsapi.dll, version 5.1.2600.2938, fault address 0x0000347e.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

***Data Execution Prevention- Even Windows TaskManager... just got the error!

Any help would be greatly appreciated.

Thanks,
Juha

Edited by Juha, 28 February 2008 - 08:46 PM.


BC AdBot (Login to Remove)

 


#2 RknRusty

RknRusty

  • Members
  • 396 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina
  • Local time:04:31 PM

Posted 28 February 2008 - 10:14 PM

Between now and when an expert comes along, I'll tell you what I would do. I'm not an expert, just a semi-skilled user.

Boot into safe mode and scan it with your spyware and antivirus programs. Then reboot into safe mode again and try a restore point from before the problems started.

I would try other things on mine, but I think it would be unwise for me to advise it to you. I hope that helps. It shouldn't hurt.

#3 Juha

Juha
  • Topic Starter

  • Members
  • 512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:09:31 PM

Posted 02 March 2008 - 08:21 PM

Thanks RknRusty for the reply,

I had already done scanning with anti-spyware and anti-virus in safe mode and nothing significant found. I would have restored but decided not to lest the Win32 infection I had comes back- well, let me delete those restore points now!

I have also removed a program, which I think may have been causing these problems. It's called Anti-Hook... Since removing it I haven't encountered any more errors...

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:31 PM

Posted 02 March 2008 - 11:15 PM

Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Then go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Juha

Juha
  • Topic Starter

  • Members
  • 512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:09:31 PM

Posted 03 March 2008 - 08:01 AM

Done!

Thanks boopme.

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:31 PM

Posted 03 March 2008 - 03:03 PM

you're welcome Juha.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users