PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

dwwin.exe (DrWatson)

Percentage of recently scanned PC's with this process running: 0.03%
Average CPU use for this program: 0%
Average RAM for this program: 5 MB


PC Pitstop Analysis

dwwin.exe is the executable for the DrWatson error information collection service activated by a Windows crash.


Recommendation

Win Patrol

dwwin.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, dwwin.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Microsoft Application Error Reporting

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called dwwin.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
dwwin.exe> 20
#MD5Size
10x9072c12513004f7d1f2b5c28496a3c57180224 bytes
20x8ee816213d3e8d309b86626a7c91a5a5180224 bytes
30x6dc562a7999477fc35360a03fc1f5e76180224 bytes
40xf32d34214e9ece8d7dcced6a46d7b9bc180224 bytes
50xe948779c895a9934600d0272cd27647e180224 bytes
60xaae33d1ed1238e834b4f5fe214eac59e180224 bytes
70x1e7a11fd443eea8a2882270638d8ef1c180224 bytes
80x1f70f7026a4d778309d39ffb4dc08e75180224 bytes
90xc353ef35218272c2242233b4a818784b162128 bytes
100x7c25440617eee6f69709aa8c915d2c32180224 bytes
110x6f2d75cf386995ff3f9eff0de09f6d26180224 bytes
120x6f1d12e21e306b9e0cf6cc73abcb97f1188416 bytes
130x9a02cc6c840d09ae5ba5758d4adc451c180224 bytes
140xa4bb93386bc1c67bc75b3f56149afd24180224 bytes
150xd3b31c40e42ddbb84415fc2c4fd57ca5180224 bytes
160x314af8c9e0d4e9a6836f8f0bd3f77e6f186936 bytes
170x4caac8eea3880e24c6c092dab12c5891180224 bytes
180x7dd363a9a07f6b7f495a4db1b77c7bae180224 bytes
190xa50e68a807642624444a3bd65625b1cd180224 bytes
200xa0adcdad39da32389b2d81753185a27c188416 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. dwwin.exe (DrWatson) has been seen on 0.03% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 5 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://www.microsoft.com/

Detailed Description and/or Removal Instructions

http://www.auditmypc.com/process/dwwin.asp

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.