My machine is always like this. This is the starting point...
The expert can tell me how this happened. Fault causes and solutions.
In Windows, drwtsn32.exe is a disk check program. At the same time, it is also a chicken program. The best way is to disable it:
Disable dr. WATSON: Enter the "drwtsn32" command in "start"-"run" to call up the dr. watson only retains the "dump all thread context" option. Otherwise, the hard disk will read for a long time and occupy a large amount of space in case of a program error.
====================================
The error message "assumer.exe drwtsn32.exe" must be disabled. We are sorry for the inconvenience caused. There are two possible options: program errors and poisoning.
========================================================== =
1. In general, this situation is mostly caused by viruses or malware. You can take a look at the virus or scan a log using Sreng. Uninstall infrequently used software. In security mode, scan for any negative evaluation plug-ins. If yes, clear them.
2. Start -- run -- msconfig to block all options except ctfmon. Try to clear junk files. This problem should be solved in general.
If not
Note the IE item again to fix ie injection. Start from-> Execute
Enter the regsvr32 actxprxy. dll command to confirm.
Enter the regsvr32 shdocvw. dll command to confirm.
Start again and download the anti-spyware expert to check if there are any Adware, spyware, Trojan, and so on. Use its IE repair function to repair the IE and attention tables, use a rogue software killer or Microsoft Malware cleanup tool to clear some site plug-ins that are hard to uninstall.
Use Huangshan ierepair experts or other IE repair software to repair IE. Wish you success ~!
========================================
Why do I often see the following prompts on my computer: drwtsn32.exe needs to be disabled when it encounters a problem. We are sorry for the inconvenience. Thank you!
This is a built-in debugging program that can be closed:
Find and delete the user. dmp file, which may save dozens of MB of space. This is the scene of the wrong program, and it is useless to us. Open the notice table, find the HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug sub-key branch, and double-click the auto key value name below it, change "value data" to 0, and press F5 to refresh to make the settings take effect. This completely cancels the execution.
======================================
Drwtsn32.exe-drwtsn32-Process Management Information
Process file: drwtsn32 or drwtsn32.exe
Process name: Microsoft Dr Watson
Process type: application process
Description:
Drwtsn32.exe is a process belonging to Microsofts Dr Watson program error debug utility. This utility can be important for technical support purposes and shocould be left alone unless suspected of causing problems.
Exam:
Drwtsn32.exe is a Microsoft Dr Watson error debugging program. This program provides technical support for users.
Prepared by: Microsoft
To: Microsoft Dr Watson
System Process: No
Background Program: Yes
Network Problems: No
Common Errors: N/
Memory usage: N/
Security grade (0-5): 0
Spyware: No
Advertising software: No
Virus: No
Trojan: No
Solution:
Any of the following measures can be taken to solve this problem,
1. Type drwtsn32 without the number of workers to change the dump file to a privileged path, such:
\ Documents and Settings \ Administrator \ drwatson \
Or cancel the "Create a dump file" option.
2. Delete the notebooks table item
Key values in [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug.
3. Use other debugging tools. Correct settings in the "NOTE" table.
4. Right-click ie-Select Program tab-click "manage loaded items" to disable suspicious loaded items. In my case, the problem was caused by "newwebcontroller class, just disable it!
========================================================== =
Why does my computer always jump out of an error report box? Please give me some advice! Reward score: 35-solution time: When I open a program, my computer will sometimes jump out and write something as if drwtsn32.exe has a problem and needs to be closed. we are sorry for the inconvenience caused. if you are in the process, the information may be lost. and then click Close on the box to close the program. after I reinstall my computer, I still see this situation. please give me some advice!
Question added: I have checked all the drivers on the computer and installed all the drivers. Q: fantasy_one-trial period 1: Check whether the drwtsn32.exe error occurs after entering the terminal and cannot be right-clicked on the file.
In the process of just getting online, I encountered the problem of assumer.exeand drwtsn32.exe. I think some netizens may be in a hurry. So I went to the Internet to find such a post for you to take the test!
The default permissions of the drwtsn32.exe fault dump file are improperly set, which may cause sensitive information leakage.
Affected System:
All current Windows Versions
Details:
Drwtsn32.exe (dr. Watson) is a program error debugger built in windows. Default
When a program error occurs, dr. Watson takes the initiative to start the program unless other
The default value of the software for debugging is changed. Note:
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
The value of the debugger item under specifies the debugger and the command used. Auto determines whether to actively diagnose the error,
And record the corresponding diagnostic information.
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
In Windows, drwtsn32.exe stores the user. dmp file in the folder by default.
Under "\ Documents and Settings \ All Users \ Documents ents \ drwatson. Permission: everyone
Full control. Stored in Windows NT in \ winnt \, the Everyone group must have at least read permission.
Because the content stored in user. DMP is a part of the current user's memory image, it may cause various sensitive information.
Leakage, such as account, password, email, browsed web pages, edited files, etc., depends on the details of the crash
The application and the operations performed by the user before.
Windows programs are so prone to crashes that malicious users cannot exploit this vulnerability to obtain unauthorized information.
. For example, ie5.0can be used to browse iexplore.exe with malicious code.
And view the email program that includes malicious code crashes.
Solution:
Any of the following measures can be taken to solve this problem,
1. Type drwtsn32 without the number of workers to change the dump file to a privileged path, such:
\ Documents and Settings \ Administrator \ drwatson \
Or cancel the "Create a dump file" option.
2. Delete the notebooks table item
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
.
3. Use other debugging tools. Correct settings in the "NOTE" table.
And related information:
In the recent issue, the default permissions of the drwtsn32.exe fault dump file were improperly set.
Description: The default permissions of the drwtsn32.exe fault dump file are improperly set, which may cause sensitive information leakage.
Affected System: all current Windows Versions
Drwtsn32.exe (dr. Watson) is a program error debugger built in windows. Default
When a program error occurs, dr. Watson takes the initiative to start the program unless other
The default value of the software for debugging is changed. Note:
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
The value of the debugger item under specifies the debugger and the command used. Auto determines whether to actively diagnose the error,
And record the corresponding diagnostic information.
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
In Windows, drwtsn32.exe stores the user. dmp file in the folder by default.
Under "\ Documents and Settings \ All Users \ Documents ents \ drwatson. Permission: everyone
Full control. Stored in Windows NT in \ winnt \, the Everyone group must have at least read permission.
Because the content stored in user. DMP is a part of the current user's memory image, it may cause various sensitive information.
Leakage, such as account, password, email, browsed web pages, edited files, etc., depends on the details of the crash
The application and the operations performed by the user before.
Windows programs are so prone to crashes that malicious users cannot exploit this vulnerability to obtain unauthorized information.
. For example, ie5.0can be used to browse iexplore.exe with malicious code.
And view email programs that contain malicious code crash. (For details about the malformed stare vulnerability in IE, refer to the exercise "including malformed stare ".
Can cause IE 5.0 or later version to crash.)
Trial:
---> Under the Administrator account:
Assume that the current default debugger is not dr. Watson. Enter the command: drwtsn32-I
Set dr. Watson as the default debugger.
Start a program that requires password. Here we select Foxmail.
Use the task manager to check Foxmail's PID, for example, "886 ". At the command prompt, type the following command:
Drwtsn32-P 886
---> Operations under the Guest account:
In the \ Documents and Settings \ All Users \ Documents \ drwatson \ folder, type the following command:
Type User. dmp | find "youemailpasswd"
The password of your email is in user. DMP and can be fully read by the guest user.
Solution:
Microsoft hasn't responded yet.
Any of the following measures can be taken to solve this problem before the patches are available,
1. Type drwtsn32 without the number of workers to change the dump file to a privileged path, such:
\ Documents and Settings \ Administrator \ drwatson \
Or cancel the "Create a dump file" option.
2. Delete the notebooks table item
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug]
.
3. Use other debugging tools. Correct settings in the "NOTE" table.
Appendix: number of regions for drwtsn32
Drwtsn32 [-I] [-G] [-P pid] [-e event] [-?]
-I treat drwtsn32 as the default application error Debugger
-G is ignored, but is provided as compatible with windbg and ntsd
-P pid: ID of the process to be debugged
-E event indicates that the process has been appended.
-? This screen
Disable drwtsn32.exe if any problem occurs. We are sorry for the inconvenience caused.
