Dr. Watson is going haywire

Perhaps I should've talked about my precautions.

I've run Kaspersky AV several times, found nothing.

I've also run Lavasoft Ad-Aware, found nothing.

I've checked for rootkits... only suspicious item was created by SecuROM, which I kind of need to validate that my software is legal.

Next time it crashes, I will post my Event Logger information. I have far too much stuff on the C drive to consider reformatting at the current moment.

Is there a way to repair Dr. Watson from the Repair Console or something? Or via some sort of utility?

If anyone can read Dr. Watson Log dumps, here's a sample of what happens when dwwin.exe crashes. As you can see, drwtsn32 and dwwin are... well... rampant.

Application exception occurred:
App: C:\WINDOWS\system32\dwwin.exe (pid=5484)
When: 11/6/2006 @ 11:03:04.671
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: JOHANN
User Name: Johann
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 15 Model 12 Stepping 0
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Johann Kwan

*----> Task List <----*
0 System Process
4 System
720 smss.exe
832 csrss.exe
864 winlogon.exe
912 services.exe
924 lsass.exe
1080 Ati2evxx.exe
1092 svchost.exe
1176 svchost.exe
1276 svchost.exe
1348 smc.exe
1412 Ati2evxx.exe
1496 svchost.exe
1604 svchost.exe
1796 spoolsv.exe
1828 LVPrcSrv.exe
1968 CTsvcCDA.exe
2020 oodag.exe
340 svchost.exe
792 Tablet.exe
760 wdfmgr.exe
588 MsPMSPSv.exe
1264 wmiprvse.exe
1300 alg.exe
1824 Explorer.EXE
2292 Acrotray.exe
2516 issch.exe
2580 em_exec.exe
2632 jusched.exe
2652 daemon.exe
2712 LVCOMSX.EXE
2744 googletalk.exe
2804 CoreCenter.exe
2864 TabUserW.exe
2880 CLI.EXE
3672 cli.exe
3688 cli.exe
2916 trillian.exe
3636 foobar2000.exe
2168 iPodService.exe
3488 flashfxp.exe
1272 FIREFOX.EXE
5172 ssstars.scr
5320 drwtsn32.exe
5456 drwtsn32.exe
5484 dwwin.exe
5500 drwtsn32.exe
5532 dwwin.exe
5548 drwtsn32.exe
5576 dwwin.exe
5592 drwtsn32.exe
5636 dwwin.exe
5660 drwtsn32.exe
5684 dwwin.exe
5700 drwtsn32.exe
5736 dwwin.exe
5760 drwtsn32.exe
5784 dwwin.exe
5800 drwtsn32.exe

*----> Module List <----*
(0000000000b30000 - 0000000000b4b000: C:\WINDOWS\system32\iprepair.dll
(0000000000d90000 - 0000000000d9b000: C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll
(00000000061f0000 - 0000000006205000: C:\WINDOWS\system32\SSSensor.dll
(0000000010000000 - 0000000010007000: C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll
(0000000030000000 - 0000000030034000: C:\WINDOWS\system32\dwwin.exe
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\UxTheme.dll
(000000005cb70000 - 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll
(000000005d090000 - 000000005d127000: C:\WINDOWS\system32\COMCTL32.DLL
(000000006f880000 - 000000006fa4a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(0000000074e30000 - 0000000074e9c000: C:\WINDOWS\system32\riched20.dll
(0000000076080000 - 00000000760e5000: C:\WINDOWS\system32\MSVCP60.dll
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\imm32.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076bfb000: C:\WINDOWS\system32\PSAPI.DLL
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.DLL
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.DLL
(0000000077260000 - 0000000077300000: C:\WINDOWS\system32\URLMON.DLL
(00000000773d0000 - 00000000774d2000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\Apphelp.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.DLL
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.DLL

*----> State Dump for Thread Id 0x1570 <----*

eax=0013f8d8 ebx=00000001 ecx=0000000d edx=8000000d esi=0013ff44 edi=0013ff44
eip=7c90eb94 esp=0013fdcc ebp=0013fdf0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
*** ERROR: Module load completed but symbols could not be loaded for C:\WINDOWS\system32\dwwin.exe
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0013fdf0 300078d3 0013ff44 00000000 00000000 ntdll!KiFastSystemCallRet
0013ff64 300074f0 30000000 00000000 00000000 dwwin+0x78d3
0013ffc0 7c816fd7 0009c900 00000000 7ffdf000 dwwin+0x74f0
0013fff0 00000000 3000749a 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000013fdcc be 91 d4 77 82 10 d5 77 - 44 ff 13 00 00 00 00 00 ...w...wD.......
000000000013fddc 00 00 00 00 00 00 00 00 - 01 00 00 00 44 ff 13 00 ............D...
000000000013fdec 00 00 00 00 64 ff 13 00 - d3 78 00 30 44 ff 13 00 ....d....x.0D...
000000000013fdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 c9 09 00 ................
000000000013fe0c 00 00 00 00 00 f0 fd 7f - 4f 66 66 69 63 65 57 61 ........OfficeWa
000000000013fe1c 74 73 6f 6e 00 fe 13 00 - 51 05 91 7c c8 08 15 00 tson....Q..|....
000000000013fe2c 6d 05 91 7c 28 ff 13 00 - 02 00 00 00 ac 07 00 00 m..|(...........
000000000013fe3c 00 00 00 00 00 00 00 00 - a0 9c fe 86 4c 1b 08 b8 ............L...
000000000013fe4c d5 36 4e 80 38 0e 06 86 - 00 00 00 00 50 06 00 00 .6N.8.......P...
000000000013fe5c 20 0e 06 86 0c 00 00 00 - a8 28 d8 81 00 00 02 00 ........(......
000000000013fe6c 3d fb 90 7c 28 ff 13 00 - 34 00 00 c0 a8 fe 13 00 =..|(...4.......
000000000013fe7c 6c fb 90 7c 71 fb 90 7c - 34 00 00 c0 28 ff 13 00 l..|q..|4...(...
000000000013fe8c 60 00 00 00 84 fe 13 00 - e8 e5 15 00 f0 fe 13 00 `...............
000000000013fe9c 18 ee 90 7c 78 fb 90 7c - ff ff ff ff 71 fb 90 7c ...|x..|....q..|
000000000013feac 18 6a dd 77 51 6a dd 77 - 00 00 15 00 01 00 00 80 .j.wQj.w........
000000000013febc ac 07 00 00 18 00 00 00 - 02 00 00 00 00 01 01 00 ................
000000000013fecc 4d 90 00 00 74 ff 13 00 - e7 ad 00 30 e0 fe 13 00 M...t......0....
000000000013fedc 01 00 00 00 94 00 00 00 - 05 00 00 00 01 00 00 00 ................
000000000013feec 28 0a 00 00 02 00 00 00 - 53 65 72 76 69 63 65 20 (.......Service
000000000013fefc 50 61 63 6b 20 32 00 00 - 00 00 00 00 00 00 00 00 Pack 2..........

*----> State Dump for Thread Id 0x1578 <----*

eax=7c8edf9c ebx=00000000 ecx=0056ffb0 edx=7c90eb94 esi=00000004 edi=00000000
eip=7c8edf9c esp=0056ffb0 ebp=0056ffec iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: kernel32
7c8edf88 0000 add [eax],al
7c8edf8a 0000 add [eax],al
7c8edf8c 0000 add [eax],al
7c8edf8e 0000 add [eax],al
7c8edf90 0000 add [eax],al
7c8edf92 0000 add [eax],al
7c8edf94 0000 add [eax],al
7c8edf96 0000 add [eax],al
7c8edf98 0000 add [eax],al
7c8edf9a 0000 add [eax],al
FAULT ->7c8edf9c 0000 add [eax],al ds:0023:7c8edf9c=00
7c8edf9e 0000 add [eax],al
7c8edfa0 0000 add [eax],al
7c8edfa2 0000 add [eax],al
7c8edfa4 0000 add [eax],al
7c8edfa6 0000 add [eax],al
7c8edfa8 0000 add [eax],al
7c8edfaa 0000 add [eax],al
7c8edfac 0000 add [eax],al
7c8edfae 0000 add [eax],al
7c8edfb0 0000 add [eax],al

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0056ffec 00000000 00460000 00000000 00000000 kernel32+0xedf9c

*----> Raw Stack Dump <----*
000000000056ffb0 0c 00 46 00 0f 00 46 00 - 83 b6 80 7c 00 00 00 00 ..F...F....|....
000000000056ffc0 00 00 00 00 04 00 00 00 - 00 00 00 00 00 d0 fd 7f ................
000000000056ffd0 05 00 00 c0 c0 ff 56 00 - d4 fb 56 00 ff ff ff ff ......V...V.....
000000000056ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000056fff0 00 00 00 00 00 00 46 00 - 00 00 00 00 00 00 00 00 ......F.........
0000000000570000 c8 00 00 00 7b 01 00 00 - ff ee ff ee 02 00 00 00 ....{...........
0000000000570010 00 00 00 00 00 fe 00 00 - 00 00 10 00 00 20 00 00 ............. ..
0000000000570020 00 02 00 00 00 20 00 00 - 71 01 00 00 ff ef fd 7f ..... ..q.......
0000000000570030 04 00 08 06 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000570040 00 00 00 00 98 05 57 00 - 0f 00 00 00 f8 ff ff ff ......W.........
0000000000570050 50 00 57 00 50 00 57 00 - 40 06 57 00 00 00 00 00 P.W.P.W.@.W.....
0000000000570060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000570070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000570080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000570090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000005700a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000005700b0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000005700c0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000005700d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000005700e0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> State Dump for Thread Id 0x1588 <----*

eax=7ffdf000 ebx=00000000 ecx=00c8e9e0 edx=7c90eb94 esi=00000000 edi=00000001
eip=7c90eb94 esp=00c8e9f0 ebp=00c8ec50 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\SHELL32.DLL -
*** WARNING: Unable to verify checksum for C:\WINDOWS\system32\iprepair.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\iprepair.dll -
ChildEBP RetAddr Args to Child
00c8ec50 7c8207f6 00c8eca8 00c8eeb0 00000032 ntdll!KiFastSystemCallRet
00c8ec78 7c81fb9d 00c8eca8 00c8eeb0 00000032 kernel32!GetComputerNameExW+0x605
00c8ec90 7ca3eeee 00c8eca8 00c8eeb0 00000032 kernel32!GetVolumeNameForVolumeMountPointW+0x15
00c8ef18 7c9ff601 00165b4e 00c8ef88 7c80929c SHELL32!SHGetRealIDL+0x63c9
00c8ef8c 7c9ff54c 000004c5 00000000 00000002 SHELL32!IsLFNDrive+0xbc8
00c8efa4 7c9ff425 00000000 7cbcd5a8 80004005 SHELL32!IsLFNDrive+0xb13
00c8efc4 7c9ff4f1 00000000 7cbcd5a8 00000000 SHELL32!IsLFNDrive+0x9ec
00c8efec 7c9ea276 00000002 00000000 00151f18 SHELL32!IsLFNDrive+0xab8
00c8f008 7c9f0019 00000002 00000000 00000001 SHELL32!Ordinal57+0xba
00c8f03c 7c9edf0f 00c8f070 00000002 00000000 SHELL32!SHBindToParent+0x44a
00c8f0a0 7c9ede50 001633b8 00000000 00151f18 SHELL32!SHParseDisplayName+0x206
00c8f108 7c9ee07b 00163a20 00000000 00151f18 SHELL32!SHParseDisplayName+0x147
00c8f130 7c9ee019 00000000 00161d68 00000000 SHELL32!SHParseDisplayName+0x372
00c8f180 7c9ede50 001539c8 00000000 00151f18 SHELL32!SHParseDisplayName+0x310
00c8f1e8 7c9edd9d 00162f98 00000000 00151f18 SHELL32!SHParseDisplayName+0x147
00c8f220 7c9ee336 00000000 00000000 00000000 SHELL32!SHParseDisplayName+0x94
00c8f244 7c9ee2f0 00c8f9d4 00000000 00000002 SHELL32!SHILCreateFromPath+0x5d
00c8f260 7c9ee497 00c8f9d4 00c8f274 00000000 SHELL32!SHILCreateFromPath+0x17
00c8f278 7ca34a4a 00c8f9d4 00000104 00c8fd0c SHELL32!ILCreateFromPath+0x18
00c8f6f8 7ca313d7 00c8f9d4 00000000 00c8f720 SHELL32!SHGetPathFromIDList+0x69
00c8fbe0 00b3293f 00b380a4 00000000 00c8fd0c SHELL32!SHGetFileInfoA+0x6e
00c8ffb4 7c80b683 00000000 00150178 006e006f iprepair+0x293f
00c8ffec 00000000 00b3289f 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000c8e9f0 92 d5 90 7c 34 09 82 7c - 7c 06 00 00 a8 ec c8 00 ...|4..||.......
0000000000c8ea00 b0 ee c8 00 b0 ee c8 00 - 53 00 6f 00 18 00 00 00 ........S.o.....
0000000000c8ea10 00 00 00 00 34 ea c8 00 - 40 00 00 00 00 00 00 00 ....4...@.......
0000000000c8ea20 00 00 00 00 73 00 6f 00 - 66 00 74 00 00 00 00 00 ....s.o.f.t.....
0000000000c8ea30 00 00 00 00 ec 00 f0 00 - 70 65 16 00 1e 00 00 00 ........pe......
0000000000c8ea40 7c 06 00 00 1c 00 5c 00 - 44 00 65 00 76 00 69 00 |.....\.D.e.v.i.
0000000000c8ea50 63 00 65 00 5c 00 43 00 - 64 00 52 00 6f 00 6d 00 c.e.\.C.d.R.o.m.
0000000000c8ea60 32 00 16 00 6f 00 72 00 - 65 00 72 00 5c 00 4d 00 2...o.r.e.r.\.M.
0000000000c8ea70 6f 00 75 00 08 00 00 00 - 50 00 6f 00 69 00 6e 00 o.u.....P.o.i.n.
0000000000c8ea80 08 00 00 00 32 00 5c 00 - 43 00 50 00 43 00 5c 00 ....2.\.C.P.C.\.
0000000000c8ea90 56 00 6f 00 6c 00 75 00 - 6d 00 65 00 80 00 00 00 V.o.l.u.m.e.....
0000000000c8eaa0 43 00 50 00 b0 01 15 00 - 20 00 00 00 6c 00 75 00 C.P..... ...l.u.
0000000000c8eab0 a0 02 15 00 00 00 00 00 - a9 e4 00 00 98 01 15 00 ................
0000000000c8eac0 00 00 00 00 04 ec c8 00 - 38 02 15 00 04 00 00 00 ........8.......
0000000000c8ead0 9c ec c8 00 04 00 00 00 - 10 00 00 00 00 00 00 00 ................
0000000000c8eae0 44 d6 bc 7c 01 00 00 00 - b4 04 9f 7c 04 00 00 00 D..|.......|....
0000000000c8eaf0 00 00 00 00 9c ec c8 00 - 18 00 00 00 dd 43 f6 77 .............C.w
0000000000c8eb00 b0 01 15 00 36 0b 00 00 - 00 00 00 00 a0 02 15 00 ....6...........
0000000000c8eb10 00 00 00 00 e4 eb c8 00 - 70 65 16 00 32 6d 16 00 ........pe..2m..
0000000000c8eb20 a0 73 16 00 00 00 00 00 - 00 00 00 00 13 11 00 00 .s..............

*----> State Dump for Thread Id 0x158c <----*

eax=00dd0000 ebx=3002b0b4 ecx=00000007 edx=7c90eb94 esi=00000104 edi=3002b708
eip=7c90eb94 esp=00d8dadc ebp=00d8daec iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00d8daec 30020a13 0000067c 001677f0 ffffffff ntdll!KiFastSystemCallRet
00d8db3c 3002387a 00166bb0 000006a4 00001564 dwwin+0x20a13
00d8e7fc 300216a7 000006a4 00001550 00000021 dwwin+0x2387a
00d8e828 3001fef1 000006a4 00001550 00000021 dwwin+0x216a7
00d8e8fc 3000d6e9 000006a4 00001550 00000688 dwwin+0x1fef1
00d8ed90 3000624b 00a80024 00d8ffa8 00150000 dwwin+0xd6e9
00d8ffb4 7c80b683 113d04aa 00150000 7c910732 dwwin+0x624b
00d8ffec 00000000 3000613f 113d04aa 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000d8dadc 7e da 90 7c 1e 97 83 7c - 7c 06 00 00 f0 77 16 00 ~..|...||....w..
0000000000d8daec 3c db d8 00 13 0a 02 30 - 7c 06 00 00 f0 77 16 00 <......0|....w..
0000000000d8dafc ff ff ff ff 40 db d8 00 - 00 00 00 00 00 00 00 00 ....@...........
0000000000d8db0c 28 db d8 00 6c e9 90 7c - 94 41 86 7c d0 77 16 00 (...l..|.A.|.w..
0000000000d8db1c 00 00 dd 00 08 b7 02 30 - 04 01 00 00 00 00 00 00 .......0........
0000000000d8db2c 00 00 00 00 00 50 00 00 - 48 db d8 00 fc e7 d8 00 .....P..H.......
0000000000d8db3c fc e7 d8 00 7a 38 02 30 - b0 6b 16 00 a4 06 00 00 ....z8.0.k......
0000000000d8db4c 64 15 00 00 21 00 00 00 - 17 00 00 00 b8 df d8 00 d...!...........
0000000000d8db5c 04 00 00 00 d4 00 14 00 - c8 db d8 00 b8 00 00 00 ................
0000000000d8db6c 98 db d8 00 c8 db d8 00 - 12 00 00 00 98 db d8 00 ................
0000000000d8db7c f9 4d 91 7c 90 dc d8 00 - 08 35 25 00 12 00 00 00 .M.|.....5%.....
0000000000d8db8c c0 de d8 00 e0 34 25 00 - 48 dd 90 7c 84 d2 91 7c .....4%.H..|...|
0000000000d8db9c c0 de d8 00 00 00 00 80 - b0 db d8 00 00 00 00 00 ................
0000000000d8dbac 8e d2 91 7c 18 00 00 00 - 00 00 00 00 c8 db d8 00 ...|............
0000000000d8dbbc 40 00 00 00 00 00 00 00 - 00 00 00 00 ca 00 c6 02 @...............
0000000000d8dbcc d8 db d8 00 12 00 3a 00 - 08 35 25 00 5c 00 52 00 ......:..5%.\.R.
0000000000d8dbdc 65 00 67 00 69 00 73 00 - 74 00 72 00 79 00 5c 00 e.g.i.s.t.r.y.\.
0000000000d8dbec 4d 00 61 00 63 00 68 00 - 69 00 6e 00 65 00 5c 00 M.a.c.h.i.n.e.\.
0000000000d8dbfc 53 00 6f 00 66 00 74 00 - 77 00 61 00 72 00 65 00 S.o.f.t.w.a.r.e.
0000000000d8dc0c 5c 00 4d 00 69 00 63 00 - 72 00 6f 00 73 00 6f 00 \.M.i.c.r.o.s.o.

I just checked the logs again, the fault seems to occur at the same address every time.

Too bad the event viewer contents were not available.

That's one busy machine. That many SVCHOST entries are telling.

How did the other scans come out from Ewido and such?

Bob

I'll let you know once I get them running, working on an essay right now.

I had the same thought, that it could be bad RAM, going to do a MemTest tonight when I go to bed.

Hey I am having the same exact problem I did find that running RegscrubXP stopped the hundreds of dwin.exe from popping up at boot but I still get errors over and over for Drwatson and auto updates and a host of other program crashes as well. I am working on it with the guys at majorgeeks.com. They really know their stuff and I will post back here if I figure it out

Good luck

Thanks. That would be really helpful.

Scanned everything you suggested... nil results.

Scanned RAM with MemTest86+ (a tool I'm achingly familiar with, unfortunately...) ... nil results.

Errors still keep popping up. And Dr. Watson still goes nuts. Going to try this RegScrubXP idea someone else posted.

Looking at your log I was curious about cli.exe, I searched and found this at the link below maybe a lead towards your problem.
www.neuber.com/taskmanager/process/cli.exe.html

Wow, finally found a post about something like this. I'm getting the same issue. Any resolutions yet?

It's usually the items I suggested. Notice the RAM, motherboard and CPU have not been swapped out or the OS reloaded.

Bob

I'm thinking of reinstalling Windows and reformatting, but I can't afford to until exams are over. Nor have I ever reinstalled without reformatting... so I'm not sure whether that will kill my registry... in which case I might as well reformat.

I don't think that it's a hardware problem. I've run memtest86+ and didn't find any RAM problems, though I might've missed something. I've run everything (the "sixpack," Ewido and such) you've suggested, but nothing seems to be working.

I got Process Explorer up (usually when this happens opening any other program immediately crashes it) and closed all instances and trees of Dr. Watson today after Dr. Watson went nuts... and it seemed to be okay, but came back minutes later.

Thanks for your help so far though, I hope I can fix this thing. Reinstalling Windows, though I once did it often, is still a pain in the behind.

The Event Viewer log shows this error:

Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x000edf9c.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


When anything else crashes (taskmgr.exe) for example when this is happening, this is the event viewer error:

Faulting application taskmgr.exe, version 5.1.2600.2180, faulting module , version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I've run all the scans... as far as what I installed when it started happening, I think I reinstalled my Logitech Webcam driver that day.

I have had on occasion other programs crash on me (things that have been installed but not run in ages) with an error soon as I try booting it, giving ModName: kernel32.dll in the error msg.

I intend to reinstall Windows after exams with a reformat, so that should solve everything. I don't like having to do it, but everything I need has been backed up on different partitions now anyway.

Hallo,

Did you find the aswer to the problem for the
multiple crashes of Dr.Watson and kernel32+0xedf9c ?
Cause I have the same problem and I think it comes for
a Program or Driver but I do not know which one.

I also consider to reinstall everthing but it might
result in the same problem if I install the same
Program or Driver what causes the problem.

Or did you finally reinstalled everthing ?

Regards,
ColomboBE

Early confusion led me to Skype but running it without ever firing up the Webcam software did not trigger the Dr Watson insanity.
Ironically, my system is so selfprotective that renaming dwwin.exe is only good for one pass and then the file is restored. I have to reboot OR I can manually shut down the following tasks in the XP's task manager:
LVPrcSrv.exe
LVComSer.exe
communications_helper.exe
cocimanager.exe

and there are usually two copies of LVComSer.exe running.

If I run a browser before stopping those tasks, DWWIN goes nuts on everything (system tray, logonui, you name it) UNTIL it is completely shut down.

It's quite an O/S degenerative condition.

It is definitely the Logitech software. The version 11 I am now on doesn't have the color and sync errors of version 9 but it still messes up something in Windows XP's environment. On my system it eventually tries to write to a ram location that it cannot and then is when Watson gets involved and runs around without (MS) Sherlock like a bumbling idiot.