PG-log

Discussion in 'ProcessGuard' started by MichaelE, Dec 10, 2003.

Thread Status:
Not open for further replies.
  1. MichaelE

    MichaelE Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    79
    Location:
    V?ster?s Sweden
    I need help.
    When I start my system PG log shows as enclosed.
    What should I doo_O

    Regards
    Michael

    I am soory had to edit.. I am new to this!!!


    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\smss.exe [596]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\csrss.exe [668]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\winlogon.exe [692]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\services.exe [740]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\lsass.exe [752]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\svchost.exe [912]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\svchost.exe [984]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\svchost.exe [1048]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on d:\program files\processguard\pg_msgprot.exe [1780]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\svchost.exe [1816]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\explorer.exe [456]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on d:\program files\processguard\procguard.exe [1432]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\program files\eset\nod32kui.exe [1936]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on d:\program files\port explorer\portexplorer.exe [536]
    [08:58:05] [P] - c:\windows\system32\drwtsn32.exe [1808] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\program files\mru-blaster\mruscheduler.exe [796]
     
  2. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    add this executable in your Process Guard list and give him full access :)
     
  3. MichaelE

    MichaelE Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    79
    Location:
    V?ster?s Sweden
    gkweb
    Thank you for your support.

    I have tried to follow your information. I hope I have understood right.
    We will see tomorrow at next boot.

    Thank you again :)
    Michael
     
  4. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    You might want to have a look what application is crashing at startup ;)
    Dolf
     
  5. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Yes something crashed, can you find the DrWatson logfile and show us the LAST error report ? To do this, do a search in "Documents and Settings" for drwtsn32.log. Open this file, and go to the bottom. Then scroll up to the first time you see the start of the error. It will read something like this

    Application error occurred (pid = 536)

    Copy and paste everything from there to the bottom

    Dr Watson will be allowed by default in the next version, and I think dwwin.exe which is the error reporting component could be allowed as well.
     
  6. MichaelE

    MichaelE Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    79
    Location:
    V?ster?s Sweden
    Gavin.
    I have done the search as requested but no hit...

    However my boot up of my system this morning had nothing in the PG log. :D

    I have changed PG as recomended earlier in this post.

    Thank you for support in this matter.
    Michael
     
Thread Status:
Not open for further replies.