Dwwin.exe failed

[Michael25]

Hello,

Ok, that is several times that my firewall zonealarm me indicates a problem:
OSFW, 2008/04/11, 23:45:06 +2:00 GMT, BLOCKED, dwwin.exe, dwwin.exe, PROCESS, STARTUPPROCESS, RSC
If it was a false positive, it does not bother me more than that. Although I like to know.
Except that when I turn off my pc via the Start button, sometimes I see this window ZA. I immediately closed and I'm empty my screen, then reappears, and I can finally turn off my pc.
Yesterday, it was tripped and ended abruptly Firefox.
ZA said that a malicious program and has blocked. Either. Only when I do a scan with Avast, Kaspersky online, Spybot and an anti-trojans, nothing is found. I'm looking for on Google What is this process, and it appears to be a normal process and work with Dr. Watson (I stuck with ZA). I stopped the process ctfmon.exe to see if it changes anything (that would be relevant. It could also do with Office but I am not following this. And apparently, there is no dirt to be found again in this name.
I think of any conflict but which, this ...

[PreatORiAn]

Hi,

If FF was closed following a crash DRW then it is possible that ZA has interpreted this as a false positive ...

try disabling the service since Dr. Watson services.msc

[Michael25]

Thank you for the answer. Firefox has crashed just when I closed the window alarm ZA. To disable it via services.msc, it is the line "service error report"? I turned off, not stop (do it). Otherwise solution as I have seen very often like this:
To disable Dr. Watson
1. Click Start, Run, type regedit in the Open box, then click OK.
2. Locate the following registry key and click:
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug
NOTE: Steps 3 and 4 are optional, but they are required if you want to restore the default use of Dr. Watson.
3. Click the AeDebug key, and then click Export Registry File on the Registry menu.
4. Enter the name and location of the registry file and click Save.
5. Delete the AeDebug key.
Well, I try your solution, we'll see if it changes anything, but I try the number 2.