Drwtson.exe

[Deband]

Since all the first round of FFXI account stealing went on I've been using Process Guard but every once in a while it blocks Drwtson.exe from modifying POl or Firefox. This causes them to shut down. Should i just let it mod them or should i turn it off completely? Thx in advance.

[liami]

It looks like Dr.Watson, Microsofts Debugging tool. Usually pops up when it wants to send an error report, due to something crashing.

[Deband]

Yeah i read that, but why would it want to modify POL? Or does Process Guard just call it sending an error report modifying?

[The Stig]

Maybe, I think, it flags them as "previously crashed" so the PC knows it's crashed before ...

Kinda like how if Firefox crashes, when you next start it up it asks if you want to go in Safe Mode, that kinda flagging. (Because it knew you crashed in the previous session)

[liami]

Not sure how process guard works, but dr.watson takes a dump of the process memory space so it can form the error report (and also find a "solution"), maybe process guard picks up that dr.watson attached itself to the process to get this data?

Is your POL/Firefox actually crashing/freezing before this happens? Or is it just after the notification?

I know on vista there's a list of "Problem Reports and Solutions", could be that dr.watson is periodically checking for solutions to these, however i wouldn't see why it would try and access the processes if there isn't a problem.

[Deband]

Is your POL/Firefox actually crashing/freezing before this happens? Or is it just after the notification?

Hard to say, although I'm beginning think its like you said. POL is crashing 1st. Then PG is picking it up trying to attach itself to the crashed program. Would that mean its ok to allow it to?

[Fhqwghads]

Is your POL/Firefox actually crashing/freezing before this happens? Or is it just after the notification?

Hard to say, although I'm beginning think its like you said. POL is crashing 1st. Then PG is picking it up trying to attach itself to the crashed program. Would that mean its ok to allow it to?

Yes.

[Deband]

Thanks