Win xp system appears "monopoly" system protection is too hot

We usually pay attention to the security of the system, but one day if you find that your system's security protection is too much, this is actually a big problem. Now WinXP users have no choice but to upgrade to WinXP SP2, which also allows users to unconditionally accept a security function called DEP (Data Execution Protection). If you use a 64-bit CPU, then this protection will be more powerful, because the 64 processor uses a new anti-virus technology - EVP (Enhanced Virus Protection), with WinXP SP2 DEP technology, can The prevention and control mechanism of the virus has taken it to a new level.

However, there are compatibility issues between EVP and DEP. It may also block programs that are useful to users. For ordinary users, the first problem is to solve this problem.

1. Modify in the system properties

By default, under "System Properties", "Advanced → Settings & Rarr; Data Execution Protection" is selected. Enable DEP” for basic Windows programs and services only. In this state, some programs do not work properly, such as Virtual PC.

If some applications do not work properly, you can select "DEP" for all programs and services except the following selected programs in the "Data Execution Protection" item, and then click “Add”, locate the installation directory of an application, find the executable file of the application, and add it. Generally, this program will run normally. The settings take effect after restarting the computer.

2. Directly modify the Boot.ini file

Locate the Boot.ini file in the root directory of the partition where the WinXP SP2 system is located. Note that it has a “NoExecute” parameter, and the previous DEP changes in the system properties are also reflected in this parameter.

There are only two options in the "Data Execution Protection" item, which are reflected in the Boot.ini file as "No Execec" and "Optin" and "Opton" values. However, some applications or drivers are not compatible, even if they are "released" in "Data Execution Protection", it still does not work properly, such as: 3721 Internet Assistant, ZoneAlarm Pro, etc. It is necessary to rely on the other two values ​​of the &Noquo;NoExecute” parameter.

The system is to be protected, but the security of the system cannot be overplayed. NoExecute=AlwaysOff is equivalent to turning off the EVP and DEP functions. At this time, both functions will be lost. The compatibility issue caused by this feature is all solved, but there is one less security wall.