0xC0000005 Access Violation

Finding a Solution for the 0xC0000005 Error

This is a fairly common Windows access violation error and hopefully this article will help you resolve the

problems you are having.

What Causes Windows Error 0xC0000005

A quick scan of the online technical forums and blogs reveal folks asking for help with this windows error.

Your question may be the same as this typical request:

I'm running Windows XP and when I click to start one of my software programs I get this error:

"An application error has occurred and an application error log is being generated. Exception: access violation

(0xC0000005), Address"

The error 0xC0000005 is generated by an illegal "memory access violation". This can be caused by

anything from faulty RAM, an incorrect/corrupt device driver, poorly written/updated software and more

commonly under Windows XP Service pack 2, malware/adware installations.

Usually you get this error message when performing a specific task, and if that happens you need to check

the corresponding 3rd party's website/support department to see if they are aware of the problem

..a while back Symantec Antivirus caused the 0xC0000005 error with an additional message about a file

called SAVRT.SYS . A simple software update to the Symantec Antivirus cured the problem.

So what can you do...? well below are a couple of suggestions:

0xC0000005

In many cases this error has been generated by faulty RAM memory. So if you have just upgraded your

computer with some new memory and you started getting this error then I would remove them and see if

the error goes away. If it does then send the memory back and get a refund!

0xC0000005

In Windows XP Service Pack 2 Microsoft introduced Data execution prevention (DEP), a set of hardware

and software technologies that perform additional checks on memory to help protect against malicious

code exploits. In Windows XP SP2, DEP is enforced by both hardware and software.

Some software/application behaviours are incompatible with DEP

which perform dynamic code generation (such as Just

mark generated code with Execute permission might have compatibility issues with data execution

prevention. Applications which are not built with SafeSEH must have their exception handlers located in

executable memory regions.

Applications that attempt to violate DEP will receive an exception with status code

STATUS_ACCESS_VIOLATION (0xC0000005).

If an application requires executable memory, it must explicitly set this attribute on the appropriate

memory by specifying PAGE_EXECUTE, PAGE_EXECUTE_READ, PAGE_EXECUTE_READWRITE or

PAGE_EXECUTE_WRITECOPY in the memory protection argument of the

http://www.updatexp.com/0xC0000005.html 1/2

3/26/2014 0xC0000005 Access Violation Error

Virtual* memoryallocation functions.

If you are having issues with 0xC0000005 errors in DEP and a particular piece of software is causing the

offence, contact the vendor for a resolution...

Note: It is possible to "Turn Off" DEP in the boot.ini file but this really would be a last step!

/NOEXECUTE

This option is only available on 32
execute protection. It enables no

which results in the Memory Manager marking pages containing data as no

executed as code. This can be useful for preventing malicious code from exploiting buffer overflow bugs

with unexpected program input in order to execute arbitrary code. No

enabled on 64

There are several options you can specify with this switch:

/NOEXECUTE=OPTIN Enables DEP for core system images and those specified in the DEP configuration

dialog.

/NOEXECUTE=OPTOUT Enables DEP for all images except those specified in the DEP configuration dialog.

/NOEXECUTE=ALWAYSON Enables DEP on all images.

/NOEXECUTE=ALWAYSOFF Disables DEP. (This setting doesn't provide any DEP coverage for any part of

the system, regardless of hardware DEP support. The processor doesn't run in Physical Address Extension

(PAE) mode unless the /PAE option is present in the boot.ini file.)

You can read more about DEP at:

http://www.updatexp.com/data

0xC0000005

I have also seen this error in the gaming community when folks have updated drivers for their graphics

card. If this happens just roll back your drivers and then "Google" to see if their are any other folks

reporting this issue. Also keep an eye on the vendors website to see if they have an update/patch

available or coming soon.

0xC0000005

Microsoft Internet Explorer 6.0 stops responding when you try to open an HTML document or a Web

page. Additionally, you receive the following error message:

Access Violation (0xC0000005 exception)

CAUSE:

This problem may occur when you use Internet Explorer 6.0 to open an HTML document or a Web page

that contains SPAN tags. If a SPAN tag is not closed correctly by using the </SPAN> tag, an access violation

may occur.

WHY are you using IE6 still??? Upgrade to IE 10 today!

...and that should have now resolved the 0xC0000005 error for you!



Data Execution Prevention

Adding Software Exceptions In Data Execution Prevention (DEP)

In my article on Data Execution Prevention (DEP) I introduced readers to one of the new security

features of Service Pack 2 for Windows XP.

At the end of that article I mentioned the ability to change thedefault setting and so include ALL software

on your computer.

This article will address HOW you can tell DEP to IGNORE specific software that may be generating

false security warnings...

If you have not read this article I suggest you do this BEFOREcarrying on with this page....

Introduction To Adding Software Exceptions In Data Execution Prevention

If you have selected the option "Turn on DEP for all programs and services except those I select:" you MAY

experience errormessages when attempting to start a program on your computer. If DEP suspects that the

software is trying to run code

notifies you with an warning message.

Now if you are running a piece of free software you "found" on the Internet and it generates this warning

message my advice is to DELETE it! It may have poorly written code or hidden adaware/spyware trying to

run etc... and is not worth the risk to your computer's security.

BUT if you are attempting to start some software you DO trust and you get the DEP warning message and

forced shut down... follow these steps to treat this software as an EXCEPTION and so have DEP ignore

any protected memory issues.

How To Add An Exception In DEP

1. Locate the software on your computer. To do this click on the Start menu and choose All Programs. Now

find the software and locate the icon you click to start the program BUT DO NOT click it yet. Instead right

click the icon with your mouse and choose Properties.

2. In the window that appears click the Shortcut "tab" along the top.

3. Now look for the section called Target and click and select the text in the box.

4. Now press Ctrl + C on your keyboard and this will copy the text.

5. On the My Computer icon right click with your mouse and choose Properties. (My Computer can be found

on the desktop and/or the Start menu depending on how you have your Windows XP setup.)

6. A small window will have appeared called: System Properties. Look for the "tab" along the top called

Advanced, now click it.

7. Now look for the section called Performance and click the button called Settings.

8. You will now see a new window appear called Performance Options, click the tab along the top called

http://www.updatexp.com/dep

3/26/2014 Adding Exceptions To Data Execution Prevention (DEP)

Data Execution Prevention and you should get the now familiar DEP window.

9. Now select the option "Turn on DEP for all programs and services except those I select:"

10. Click the Add button that is no longer greyed out and a standard Open File window will appear. Click in

the File Name box and then press Ctrl + V on your keyboard to paste the filelocation into the box. It may

look something like: "C:\Program Files\Bradbury\FeedDemon\FeedDemon.exe"

11. Click the Open button and the window will close and the software will now be visible in the DEP

exception list. Now click the Apply button and close all the open windows.

You have now added the software to a custom list of software that DEP will ignore. If you wish to add

more to the list just follow the steps again outlined above!

I hope this article on the Windows XP Data Execution Prevention utility was useful?

Data Execution Prevention (DEP)

Introduction To Using Data Execution Prevention In Windows XP SP2

Data Execution Prevention (DEP) helps prevent damage

from viruses and other security threats that attack your

computer by running (sometimes called executing)

malicious code from memory locations that only Windows

and other programs should use.

This type of threat causes damage by taking over one or

more memory locations in use by a program. Then it

spreads and harms other programs, files, and even your

e

This type of "attack" is very common and that is

why Microsoft have introduced DEP into Service Pack 2 for

Windows XP..

Unlike a firewall or antivirus program though, Data

Execution Prevention DEP does NOT help prevent harmful

programs from being installed on your computer. Instead, it monitors your programs to determine if

they use system memory SAFELY. To do this, DEP software works alone or with compatible processors to

mark some memory locations as "non

protected location, DEP closes the program and notifies you with an warning message..

Software or Hardware DEP?

There are two types of Data Execution Prevention "Software Enforced" and "Hardware Enforced".

Most users reading this article are going to be using Software Enforced data execution prevention

is available to any machine running Windows XP Service Pack 2.

Hardware enforced DEP is only available (as of writing this article) to users who have machines based on

the AMD Operton 32 or 64 bit processor, or the AMD Athlon 64 processor with NX (no execute page

protection), or the Intel Itanium processor with XD (execute disable bit).

Where Can I Find DEP On My PC?

1. On the My Computer icon right click with your mouse and choose Properties. (My Computer can be found

on the desktop and/or the Start menu depending on how you have your Windows XP setup.)

2. A small window will have appeared called: System Properties. Look for the "tab" along the top called

Advanced, now click it.

3. Now look for the section called Performance and click the button called Settings.

4. You will now see a new window appear called Performance Options, click the tab along the top called

Data Execution Prevention.

By default Data Execution Prevention is turned on for Windows programs and services only and for most

users this is fine.

However, you can gain more protection by selecting the second option and DEP will now work for ALL

programs and services on your computer. BUT this is know to generate some error messages as legitimate

software can conflict with DEP.

If this happens, you get a warning dialog box on your screen informing you of an error and the software

you are trying to use will not start.

http://www.updatexp.com/data

3/26/2014 Data Execution Prevention (DEP)

If this was a nasty piece of software lurking on your computer then DEP will have done its job. BUT if it

happens to you when trying to work with some software you fully trust, this can be a problem, but

fortunately there is a solution...

...you will need to tell Data Execution Prevention to ignore the software you want to use!

(Note: The DEP error message should always tell you

which software caused the problem and who the

publisher is, if you do NOT recognise the information

provided then suspect fowl play and seek the advice of a

more experienced user/technician....)

Enabling this option can ALSO cause a conflict with some

Hardware drivers and present you with a warning dialog

saying something along the lines of:

(ATTEMPTED_EXECUTE_OF_NONEXECUTE_MEMORY).

If that happens you will need to try and track down

updated Windows XP drivers for the Hardware involved

preferably marked "Digitally Signed" for Windows XP

To find out how to tell Data Execution Prevention to

ignore the software you want to use read this page:

http://www.updatexp.com/dep

To find out how to update a hardware driver read this page:

http://www.microsoft.com/windowsxp/using/helpandsupport

/learnmore/russel_02october14.mspx

I hope this article on the Windows XP Data Execution Prevention (DEP) was useful?