Windows Forum

Ask something
Discussion Locked

DrWatson running 88 times!

0 helpful
6 replies

by darrynmarr1979 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Ok, im stumped on this 1, ive just removed a few files that were causing my system problems which were ;

ioru.exe (no idea what it was, but didnt belong there)
vxgame and vx blocker.dll (dropper exploit i think)
win32.exe (some relation to a virus dont know which)

ok, let me ask my question, why is it that now when i restart windows xp (professional edition) my task manager is now filled up to the eyeballs with drwtsn32.exe, as in its running 88 times!! at once!! i know what DrWatson is, i know what it does (for the most part anyway), what i dont understand is what its doing running 88 times in my procces and taking up to 50% of my processing power!!!!

again ill repeat that, drwtsn32.exe is running 88 times in my processes and isnt closing or coming up with ANY messages at all.

Im running norton antivirus 2005 on my machine, ad-aware, ran full system scans on both cant find anything.

Any help would be appreciated, as well as any comments to see if anyone else has had this? and how to stop it happening again!!

6 replies

by darrynmarr1979

just to add, ive disabled error reporting in system services, in the my computer advanced settings too, its really beginning to bug me!

by black panther

Have not got an answer why but to DISABLE Dr Watson from running

Start > Run > start menu Run command, type in: drwtsn32.exe 2. Clear all check marks from Options boxes.
3. This will disable Dr. Watson from running

by dmiles

Sounds like you have the DrWatson virus which is very difficult to remove and has lead to wiping the drive clean
The virus creates a file called C:\DRWATSON.COM and adds the line "@drwatson" to C:\AUTOEXEC.BAT. May display the message "Tracing mode has been destroyed." Please also note that Windows does have a tool called Dr Watson(DRWATSON.EXE) which is usually located in the WINDOWS directory. The virus probably uses this file name to confuse the user and make this file (C:\DRWATSON.COM) less suspicious.

Symantec instructions offer very little info as well as help to removal,make sure that you have updated virus definition files bdfeore running scan

by darrynmarr1979

checked for the virus, nothing there, ran norton antivirus, didnt find anythin, im just chalking it up to one of those random things, thanx for the help guys

This discussion is closed to new replies.