<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Randal Adamson wrote:<br>
<blockquote cite="mid1135217258.6284.51.camel@localhost.localdomain"
type="cite">
<pre wrap="">On Wed, 2005-12-21 at 09:48 +0800, Jonathan Young wrote:
</pre>
<blockquote type="cite">
<pre wrap=""><a class="moz-txt-link-freetext" href="http://www.amd.com/us-en/Processors/ProductInformation/0,,30_118_9485_9487%5E9492,00.html">http://www.amd.com/us-en/Processors/ProductInformation/0,,30_118_9485_9487%5E9492,00.html</a>
</pre>
</blockquote>
<pre wrap=""><!---->--[quote]--
*Enhanced Virus Protection will by default only protect the user's
Windows operating system. After properly installing the appropriate
Windows release, users must enable the protection of their applications
and associated files from memory buffer overrun attacks. Contact your
application software vendor for information regarding use of the
application in conjunction with Enhanced Virus Protection. AMD and
Microsoft strongly recommend that users continue to use third party
anti-virus software as part of their security strategy.
--[/quote]--
Has anyone actually tried this? </pre>
</blockquote>
Yes. <br>
<br>
In the System Properties: My Computer (Right-click goto Properties)
-> Advanced (Tab) -> Performance (section) -> Settings
(button) -> Data Execution Prevention (tab)<br>
<br>
Your have two choices:<br>
<br>
(1) Turn on DEP for essential Windows programs and services only.<br>
(2) Turn on DEP for all programs and services except those I select:
<list><br>
<br>
Option 1 is the default and if your processor does not support the
feature then they both do nothing with the message "Your computer's
processor does not support hardware-based DEP. However, Windows can use
DEP software to help prevent some types of attacks.".<br>
<br>
Which is why on my PIV laptop I still used to get messages relating to
DEP when Windows killed a suspicious (read: badly-written) program.<br>
<br>
On a modern CPU, assuming you remember to go to this section and
complete the extra step (Option 2) then it seems to work quite well.
Though I agree that I would still want Anti-Virus to scan incoming
emails, web content etc.<br>
<br>
It seems quite able to stop things relating to Autorun and web page
views (thumbnails in explorer etc.), but really then all they have done
is patched the problems they introduced with these new features...
Perhaps in the future this type of security will become more useful.
It is certainly forcing programmers for Windows to address how they
allow their programs to access CPU and memory resources for fear of
being killed off as a suspect application. There was a fair bit more
discussion of these developments on AMD's site, but I don't have a link
right now.<br>
<br>
<div class="moz-signature">-- <br>
<title>Jonathan Young of PC-PHIX</title>
<meta http-equiv="Content-Type" content="text/html; ">
<meta http-equiv="Content-Language" content="en-us">
<meta name="Signature" content="Jonathan Young">
<meta name="Copyright" content="Copyright 1997 to 2004 PC-PHIX">
<font face="Verdana" size="2">
Jonathan Young<br>
Director of PC-PHIX<br>
<a class="moz-txt-link-abbreviated" href="mailto:jonathan@pcphix.com">jonathan@pcphix.com</a><br>
<br>
Phone: 0410 455 674<br>
Web: <a class="moz-txt-link-freetext" href="http://www.pcphix.com/">http://www.pcphix.com/</a><br>
<br>
</font> </div>
</body>
</html>