LandzDown Forum

Hi,

I am having a problem with WinPatrol.

I have moved a handful of programs to the delay start menu, however when my computer boots up these programs do not start at all (even within the time set).

Also, I have a program that is no longer on my system but cannot be removed from the list and a couple of delayed starts that I am unable to change the delay time for.

Any Ideas?

Many Thanks
BD

The Hijack Log in WinPatrol is not working.  No response when i click the button.

Here is a HijackThis Log if it helps.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 00:58:36, on 04/01/2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16453)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\ccSvcHst.exe
C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
D:\PROGRAM FILES\LIGHTSCREEN PORTABLE\APP\LIGHTSCREEN\LIGHTSCREEN.EXE
C:\Users\marka_000\APPDATA\LOCAL\MICROSOFT\SKYDRIVE\SKYDRIVE.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Desktop Google Reader\DesktopGoogleReader.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
D:\Program Files\RevoUninstaller Portable\RevoUninstallerPortable.exe
D:\Program Files\RevoUninstaller Portable\RevoUninstallerPortable.exe
D:\Program Files\RevoUninstaller Portable\App\RevoUninstaller\Revouninstaller.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\marka_000\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\IPS\IPSBHO.DLL
O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\coIEPlg.dll
O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKCU\..\Run: [BrowserChoice] "C:\Windows\BrowserChoice\browserchoice.exe" /run
O4 - HKUS\S-1-5-21-4209119735-118288704-184786088-1004\..\Run: [AdobeBridge]  (User 'marka_000')
O4 - HKUS\S-1-5-21-4209119735-118288704-184786088-1004\..\Run: [Lightscreen] D:\PROGRAM FILES\LIGHTSCREEN PORTABLE\APP\LIGHTSCREEN\LIGHTSCREEN.EXE -h (User 'marka_000')
O4 - HKUS\S-1-5-21-4209119735-118288704-184786088-1004\..\RunOnce: [Uninstall C:\Users\marka_000\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\marka_000\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64" (User 'marka_000')
O4 - HKUS\S-1-5-21-4209119735-118288704-184786088-1005\..\Run: [AdobeBridge]  (User 'UpdatusUser')
O4 - S-1-5-21-4209119735-118288704-184786088-1004 Startup: SyMenu.lnk = D:\Program Files\SyMenu Portable\SyMenu.exe (User 'marka_000')
O4 - S-1-5-21-4209119735-118288704-184786088-1004 User Startup: SyMenu.lnk = D:\Program Files\SyMenu Portable\SyMenu.exe (User 'marka_000')
O4 - Startup: Intel(R) Turbo Boost Technology Monitor 2.6.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Global Startup: Install LastPass IE RunOnce.lnk = C:\Program Files (x86)\Common Files\lpuninstall.exe
O8 - Extra context menu item: LastPass - file://C:\Users\marka_000\AppData\LocalLow\LastPass\context.html?cmd=lastpass
O8 - Extra context menu item: LastPass Fill Forms - file://C:\Users\marka_000\AppData\LocalLow\LastPass\context.html?cmd=fillforms
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: DisplayLinkManager (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Lexar Secure II (LxrSII1s) - Lexar Media, Inc. - C:\WINDOWS\system32\LxrSII1s.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\System Control Manager\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.6 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12177 bytes

Thanks for helping Corrine,  your last question is what I need to know the most right now.

What version of WinPatrol is the most important right now. 
I'm actually making final touches on a new version and the help file included for Delayed Start should be helpful.

If programs are launching, the main question is if WinPatrol.exe is opening ok when the system starts up. I have run into situations where other programs are blocking WinPatrol from starting.  Obviously, if WinPatrol isn't running it won't be able to launch the programs on that list.

Why the delay time can't be changed had me puzzled.  I have never heard anyone report of that kind of problem with any version.

Check our our new version 26.1.2013 tomorrow and if you continue to have problems contact support@WinPatrol.com

Thanks,
Bill

With a fresh installation of Windows 8, either Trend Micro's HJT is really messed up or something is off because your log shows over 20 instances of Google Chrome running.  That is rather extreme.

Just to touch all bases, when you attempted to remove a program from delayed startup and return to normal startup, did you right-click the item and select "Restore Program to Windows Startup List"?

For Startup items, try re-adding to startup:

    Right-click Scotty in the system tray to launch WinPatrol, selecting "Options", accepting any UAC prompt.
    Click the Start up Programs tab in WinPatrol and click the Add button at the bottom of the window.
    Navigate to the location of the program to be added, locate and highlight the .exe file and click Open.

You haven't indicated if you attempting uninstalling and reinstalling WinPatrol.  If you have WinPatrol PLUS, be sure to note your PLUS account info first.   See the WinPatrol Removal Program located on this page:  http://www.winpatrol.com/download.html

If a clean installation of WinPatrol doesn't solve the problem, I suggest sending an e-mail to Bill, as he indicated in his reply above.

OK.  So i removed WinPatrol Completely and used the removal tool.  I cleaned my registry.  I installed WinPatrol again.

Now, I am unable to move any of the programs to delayed startup, apart from the 1 that was working fine before.

Wait, Scotty just displayed some dialog boxes saying that those programs do not want to be moved, i clicked yes and moved them all back to normal startup.

The programs that would not delete before are now gone after the registry clean.

WinPatrol Log, Spreadsheet Report and Hijack Log are all still dead buttons giving no response.

I had a thought, I got a dialog boxes when trying to move the programs to delayed startup saying, this program is run by all users... etc.  Maybe this is where the bug originated?  Just a thought.

After reboot WP failed to load, therefore all the delayed startups did not load.  I tried rebooting again, same issue.  So I went into task manager, created a task to run WP at startup, with highest privilages.  Rebooted again and still had the same issue, WP failed to start.  After looking in Task Manager, it said it was ready to run but it had not.  I had to run WP manually.

Any suggestions, this is getting frustrating.

Oh, WP is set to run when windows starts, btw.

I noticed that Norton 360 is in your log.  Did you uninstall the pre-installed with Windows 8 Windows Defender?   If not, the two could be causing conflicts.  You could also try disabling all of the Norton 360 features (while disconnected from the Internet) to see if that makes a difference.

More importantly, as Bill mentioned in his post, about 1/2 hour ago, he released WinPatrol 2013 version 26.1.2013, http://www.winpatrol.com/upgrade.html.  It includes additional options for Windows 8.

Hi Corrine,

I do not have Win Defender and N360 running simultaneously.  I will try out the update now.

Thanks