Author Topic: oddity in the File Types monitor  (Read 13801 times)

0 Members and 1 Guest are viewing this topic.

Offline BillPStudios

  • Visiting Experts
  • Full Member
  • *****
  • Posts: 70
    • View Profile
    • WinPatrol
Re: oddity in the File Types monitor
« Reply #15 on: November 10, 2013, 03:19:24 PM »
Yea, I couldn't rest until I was able to look and figure out where the main failure is occurring.
I still need to find out why I'm not in sync but I can confirm that the list used in the display of file types is obtained in the followinf registry key

HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Class

The default value will typically appear as the file extensions separated by a semi-colon.

AVI;BAT;CAB;CAT;CHM;COM;CMD;CSS;DOC;EML;EXE;INF;JS;LOG;MSI;MSG;MID;MP3;PIF;RAM;REG;RTF;SBS;SCR;TXT;URL;VBS;VBE;WSF;WSH;XLS;

RTF should be included by default but if it was somehow removed it could screw things up.  I still have some research to do but I was able to confirm this string is used in the display of file types which are shown on our list as being monitored.

( I guess I was tired because I just noticed I wrote this last night and it was still unsent on my screen this afternoon.  ) :laughing:

Thanks,
Bill

Offline ancient1

  • Jr. Member
  • **
  • Posts: 21
    • View Profile
Re: oddity in the File Types monitor
« Reply #16 on: November 11, 2013, 12:37:30 PM »
ky331, you mentioned a mismatch in the "Command" column in the "File Types" tab. In my case, WinPatrol lists the command for .TXT files as NOTEPAD.EXE. That is a mismatch. The program that opens .TXT files has long been NoteTab Pro, not Notepad. Just now I switched it to Notepad++, then back again to NoteTab Pro. Scotty slept through it all.

I have now checked two other computers: someone else's Windows 7 Home Premium x64 SP1 machine, running WinPatrol 28 (not 29) Free; and a Windows 8 Pro x64 desktop on which I installed WinPatrol 29 Free. In the former, WinPatrol exhibits the RTF issue. In the latter, it does not.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: oddity in the File Types monitor
« Reply #17 on: November 11, 2013, 01:22:25 PM »
Thanks, ancient1.   The more "clues" to this puzzle, the easier it should be for BillP to solve it.

Offline ancient1

  • Jr. Member
  • **
  • Posts: 21
    • View Profile
Re: oddity in the File Types monitor
« Reply #18 on: August 18, 2014, 04:53:28 PM »
This problem maybe affects just a tiny minority of users, so I am not complaining here, just reporting. The situation is unchanged as of WinPatrol 2014 v 32.0.2014.5. WinPatrol's "File Types" is still broken and dysfunctional for some of us.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: oddity in the File Types monitor
« Reply #19 on: August 18, 2014, 06:32:15 PM »
ancient1,

As you may (or may not) be aware, BillP/family had some health issues, and ultimately decided to transfer control of WinPatrol to another party.

Hopefully the new owner, Bret, will... at his earliest convenience... check out what's happening [or not] in this thread.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20777
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: oddity in the File Types monitor
« Reply #20 on: August 19, 2014, 01:24:40 AM »
I gave Bret a head's up to let him know that this is still a problem.  He'll be taking a look at it and checking the records and with Bill to see if it is a one-off or something a large number of users are running into.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Bret Lowry

  • WinPatrol Developer
  • Visiting Experts
  • Sr. Member
  • *****
  • Posts: 320
    • View Profile
Re: oddity in the File Types monitor
« Reply #21 on: August 19, 2014, 11:06:00 AM »
Hi,

Corrine brought this thread to my attention. This is the first I've heard of this issue. At first I thought, I see RTF on my computer, so maybe it will be as simple as upgrading to V32. But, as I read on, I realized that is not the case.
I'm going to read through the thread again more closely and see if I can get a test machine to exhibit this behavior. It is always easier to fix something if you can get a repro.

I apologize about the problems with file types and will be working to discover what is happening. I will also be monitoring this thread, so if you find any additional information, please do not hesitate to post. From what I've seen and read in Bill's response to the initial posting, the posts are very thorough in describing what is happening. That should help.

Thanks,
Bret.

Offline LilBambi

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 488
    • View Profile
    • LilBambi's BambisMusings Blog
Re: oddity in the File Types monitor
« Reply #22 on: August 20, 2014, 03:54:25 PM »
Sometimes you really need a removal program to fix whatever went wrong or got corrupted somehow.

Someone recently got Malwarebytes Anti-Malware from an untrusted source. I removed it fine, and tried to install the real one from malwarebytes.org and got errors all over the place. I got the removal tool from Malwarebytes.org (via the link in their forums), and then installed Malwarebytes Anti-Malware fine and it is working great. Between it and the other tools, I was able to clean the computer up and the owner is very happy. But I could not have done it without that uninstaller. Same has been true with many AV programs.

Might want to give it (winpatrolremove.exe ) a try (from Corrine's link).
Bambi
AKA Fran
Jim-Fran.com

Offline ancient1

  • Jr. Member
  • **
  • Posts: 21
    • View Profile
Re: oddity in the File Types monitor
« Reply #23 on: August 20, 2014, 06:17:36 PM »
Sometimes you really need a removal program to fix whatever went wrong or got corrupted somehow.

Someone recently got Malwarebytes Anti-Malware from an untrusted source. I removed it fine, and tried to install the real one from malwarebytes.org and got errors all over the place. I got the removal tool from Malwarebytes.org (via the link in their forums), and then installed Malwarebytes Anti-Malware fine and it is working great. Between it and the other tools, I was able to clean the computer up and the owner is very happy. But I could not have done it without that uninstaller. Same has been true with many AV programs.

Might want to give it (winpatrolremove.exe ) a try (from Corrine's link).

I did, as reported.

So far in this thread, 3 different computers belonging to 3 different owners are reported to have the same problem. All of them Win7-64 machines. If 3 independent sad sacks were unlucky enough to be hit by the same corruption, that is, if WinPatrol is prone to a particular corruption, then perhaps the developers need to look into that.

LilBambi, please, if you have the use of a Win7-64 PC, I wonder if you would check whether (a) WinPatrol on that PC detects and alerts to changes in file types and (b) new file types can be added via the Add button.

Offline LilBambi

  • LzD Friends
  • Sr. Member
  • *****
  • Posts: 488
    • View Profile
    • LilBambi's BambisMusings Blog
Re: oddity in the File Types monitor
« Reply #24 on: August 20, 2014, 11:04:34 PM »
Sometimes you really need a removal program to fix whatever went wrong or got corrupted somehow.

Someone recently got Malwarebytes Anti-Malware from an untrusted source. I removed it fine, and tried to install the real one from malwarebytes.org and got errors all over the place. I got the removal tool from Malwarebytes.org (via the link in their forums), and then installed Malwarebytes Anti-Malware fine and it is working great. Between it and the other tools, I was able to clean the computer up and the owner is very happy. But I could not have done it without that uninstaller. Same has been true with many AV programs.

Might want to give it (winpatrolremove.exe ) a try (from Corrine's link).

I did, as reported.

So far in this thread, 3 different computers belonging to 3 different owners are reported to have the same problem. All of them Win7-64 machines. If 3 independent sad sacks were unlucky enough to be hit by the same corruption, that is, if WinPatrol is prone to a particular corruption, then perhaps the developers need to look into that.

LilBambi, please, if you have the use of a Win7-64 PC, I wonder if you would check whether (a) WinPatrol on that PC detects and alerts to changes in file types and (b) new file types can be added via the Add button.

I prefer 64-bit Win7, but my hardware on my 'new to me' laptop needed the 32-bit version for driver support sadly. So I had to install the 32-bit version of my Win7 Ultimate. I am happy with it, as now I have my Windows 7 Ultimate (Retail) alive and well again after the last computer died after a few short months. :(

So, as much I as would love to help out with that on a 64-bit system, my system works fine with it (32-bit). And the few customers I have put the new version on with both 32-bit and 64-bit systems haven't had any problems as yet but they don't worry about customizations on their systems.

I agree it should be looked into.  Not sure why it would do that.

But in the meantime, was what I was talking about. And you did it.
Bambi
AKA Fran
Jim-Fran.com

Offline JDBush61

  • Hero Member
  • *****
  • Posts: 4654
    • View Profile
Re: oddity in the File Types monitor
« Reply #25 on: August 20, 2014, 11:19:49 PM »
LilBambi, please, if you have the use of a Win7-64 PC, I wonder if you would check whether (a) WinPatrol on that PC detects and alerts to changes in file types and (b) new file types can be added via the Add button.

Hi ancient1,

Since LilBambi is currently running 32 bit Windows 7, maybe I can help you? The laptop I'm typing from is my Sony Vaio, 64-bit, Win 7, with WinPatrol (current version) installed. To be honest, I actually am at a loss as to how WinPatrol works, so not quite sure how to do the checks you're interested in. However, if you -- or someone -- can quickly outline for me what to do to check the file-type questions you stated above, then I'm more than happy to help. Let me know.

Best,

John
"In an age when mass society has rendered obsolete the qualities of individual courage and independent thought, the oceans of the world still remain, vast and uncluttered, beautiful but unforgiving, awaiting those who will not submit. Their voyages are not an escape, but a fulfillment."

~ THE SLOCUM SOCIETY ~

Offline ancient1

  • Jr. Member
  • **
  • Posts: 21
    • View Profile
Re: oddity in the File Types monitor
« Reply #26 on: August 21, 2014, 11:28:42 AM »
LilBambi, please, if you have the use of a Win7-64 PC, I wonder if you would check whether (a) WinPatrol on that PC detects and alerts to changes in file types and (b) new file types can be added via the Add button.

Hi ancient1,

Since LilBambi is currently running 32 bit Windows 7, maybe I can help you? The laptop I'm typing from is my Sony Vaio, 64-bit, Win 7, with WinPatrol (current version) installed. To be honest, I actually am at a loss as to how WinPatrol works, so not quite sure how to do the checks you're interested in. However, if you -- or someone -- can quickly outline for me what to do to check the file-type questions you stated above, then I'm more than happy to help. Let me know.

Best,

John

John, here's the easy one:

Open the File Types tab in WinPatrol. Are the DOC and RTF types present (for this, it is convenient to click the "Extension" header to sort the list temporarily by extensions)? If not, click the Add button and try adding the absent one. Is that successful, or are you blocked with an error message claiming that "This file type is already being monitored"?

It might be helpful if a few people, using any OS, did this and reported the results along with detailed OS and WinPatrol version info.

Offline ancient1

  • Jr. Member
  • **
  • Posts: 21
    • View Profile
Re: oddity in the File Types monitor
« Reply #27 on: August 21, 2014, 11:40:46 AM »
... and whether a non-Microsoft office suite or word processor has even been installed on that computer.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: oddity in the File Types monitor
« Reply #28 on: August 21, 2014, 12:22:02 PM »
Here's an example on 32-bit WinXP SP3 and WinPatrol 32.0.2014.5:

By default, .TXT files open with NotePad.  And this is showing up in WinPatrol (Command=notepad.exe, Class=txtfile, Type=system).

Emphasize that I have verified that FileTypes are LOCKED under WinPatrol's Options tab.

If I then go to Control Panel, Folder Options, File Types, select the .TXT extension and change it to WordPad, this becomes my new default:   If I open My Documents Folder and click on a .TXT file, it now opens with WordPad.   WinPatrol, despite FileTypes being locked, allowed the change.

In fact, on my 32-bit XP system, WinPatrol now actually shows TWO entries for .TXT files:   the one I mentioned above, plus a new one  (Command=wordpad.exe, Class=WordPad MFC Application, Type=explorer)

If I then go through Control Panel to change the .TXT type again, this time to WORD, the first (type=system) entry in WinPatrol remains intact, while the second changes to (Command=WinWord.exe, Class=Microsoft WORD for Windows, Type=explorer).   Again, the change is allowed --- silently --- despite FileTypes being LOCKED in WinPatrol.

I'm gonna try this out under Win7 and report back in a bit...

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 703
    • View Profile
Re: oddity in the File Types monitor
« Reply #29 on: August 21, 2014, 12:45:57 PM »
Now on 64-bit Windows 7 SP1.   Everything else is the same as above, and I see I'm starting with WinPatrol showing .TXT as (Command=notepad.exe, Class=txtfile, Type=system).

On Win7, it's Control Panel, DEFAULT PROGRAMS, Associate a File Type or Protocol with a Specific Program --- to change a file type.

Changing .TXT to WordPad, I now confirm that when I go to My Documents and click on a .TXT file, it indeed opens with WordPad.   But there is NO change whatsoever in WinPatrol's reporting:   The original .TXT entry (type=system) remains... but UNlike the experience just mentioned above on WinXPx32, there is NOT a new (type=explorer) entry added.   WinPatrol completely ignored the change here.

Changing .TXT a second time, to OpenOffice Writer, the same thing happens:   WinPatrol allows... and ignores... this second change as well:  WinPatrol still shows .TXT files (type=system) being opened by NotePad, yet they are in fact now opening with OpenOffice Writer.

By the way, I should also mention that I have WinPatrol PLUS, and that FileTypes (already noted as being locked) are set to be monitored in Real Time --- so it's a not a matter that I didn't wait long-enough for WinPatrol to sense the change.