Too many WinPatrol PLUS entries in Startup Programs

[onDvine]

I've had an issue for quite awhile in my Win7/64 computer and may as well get it resolved if possible even though it doesn't appear to interfere with anything. 

There are three WinPatrol PLUS entries in Startup Programs (screen snapshot attached).  The highlighted one says "File does not exist," and I was able to disable it but can't delete it by any means tried.  It always shows the current date as when first detected.

Am afraid if I delete one of the duplicates (both dated 7/20/14), both will disappear, so I haven't tried that.  Would appreciate advice but am willing to continue ignoring these entries if significantly simpler.

Gotta go out but will check back later or tomorrow.  Thanks in advance.  :smiley:

[onDvine]

I just noticed two show Status as running and Type as disabled.  That doesn't make much sense.  Gotta run or be late for the doctor.

[Corrine]

Let's see if we can figure things out, onDvine.

The simplest step would be to change one of the WinPatrol PLUS startup entries to Enabled and remove the duplicate entry from WinPatrol.  First, select one of the Disabled entries and changed it to Enabled.  Then select the Disabled WinPatrol PLUS item and click Remove.  That should leave you with one current winpatrol.exe in startup.   

Although it is highly unlikely, if after a restart two winpatrol.exe files return to startup, check the C:\Program Files (x86)\Ruiware\WinPatrol folder and make sure there is only one winpatrol.exe.  In the unlikely event there are two, right click the icon and select Properties.  Click the Details tab.  It should show File Version 33.1.2015.0.  Check the second icon in the same manner for the File Version.  If one is for an earlier version, delete it.  If both are for Version 33.1.2015.0, delete one of them and then check the startup tab in case it is necessary to re-enable the disabled winpatrol.exe.  (Remember, winpatrolexe.exe is WinPatrol Explorer and should have a blue background in the folder.)

As to the WinPatrol.exe file that does not exist, I suspect it is from the C:\Program Files (x86)\BillP Studios\WinPatrol folder.  If you do not have TaskCatcher installed, you can move the entire C:\Program Files (x86)\BillP Studios folder to the recycle bin.  Otherwise, if TaskCatcher is installed, only move the C:\Program Files (x86)\BillP Studios\WinPatrol folder to the recycle bin.

[onDvine]

Thanks, Corrine.

... change one of the WinPatrol PLUS startup entries to Enabled and remove the duplicate entry from WinPatrol.  First, select one of the Disabled entries and changed it to Enabled.  Then select the Disabled WinPatrol PLUS item and click Remove.  That should leave you with one current winpatrol.exe in startup. ...

When I enable one, both become enabled.  However, they are different Types (screen snapshot attached).  As I typed the previous sentence, Scotty disappeared from the tray!  Task Manager doesn't show it as a running process but perhaps it will after I reboot.

... check the C:\Program Files (x86)\Ruiware\WinPatrol folder and make sure there is only one winpatrol.exe.  In the unlikely event there are two, right click the icon and select Properties.  Click the Details tab.  It should show File Version 33.1.2015.0.  Check the second icon in the same manner for the File Version.  If one is for an earlier version, delete it.  If both are for Version 33.1.2015.0, delete one of them and then check the startup tab in case it is necessary to re-enable the disabled winpatrol.exe.  (Remember, winpatrolexe.exe is WinPatrol Explorer and should have a blue background in the folder.) ...

It appears that there are two, one blue and one green, with slightly different names but both the current version.  Will also attach a screen snapshot of that.

... As to the WinPatrol.exe file that does not exist, I suspect it is from the C:\Program Files (x86)\BillP Studios\WinPatrol folder.  If you do not have TaskCatcher installed, you can move the entire C:\Program Files (x86)\BillP Studios folder to the recycle bin.  Otherwise, if TaskCatcher is installed, only move the C:\Program Files (x86)\BillP Studios\WinPatrol folder to the recycle bin.

I can't locate a BillP Studios\WinPatrol folder ANYwhere to move to the recycle bin.

[onDvine]

Here is the view from WinPatrol's Startup tab of both types of WinPatrol that are running.  Now, will reboot and see if anything improves.

[onDvine]

Active Tasks include WINPATROL.EXE and WINPATROLEX.EXE, if that's helpful to know.  Scotty returned to the tray after rebooting.  It's puzzling, but luckily not an emergency to fix today.

[Corrine]

I must have deleted the line about WinPatrolex.exe while I was composing my reply.  WinPatrol.exe is the system monitor (green) and WinPatrolex.exe is WinPatrol Explorer (blue).  See WinPatrol Components for a complete explanation of the two.

Although it is not unusual to see duplicates of autorun programs if you are running a 64 bit version of Windows since Windows maintains a duplicate entry which is redirected when running as under 64 bit mode. The duplicates are identical.  For your security WinPatrol will still display both locations to make sure some kind of malware doesn't try to trick Windows by saving their autorun information directly. 

That said, I don't think what is happening in your situation is the case here.  What I would try next is to remove winpatrol.exe from startup, restart, check WinPatrol to see if removing one item removes both.  I expect that for some strange reason (hiccup) it will remove both.  Restart the computer (yes, restart again ;) ).  Confirm WinPatrol is not in startup programs and then add it back to startup.  Instructions are here:  Start Up Programs: Remove, Add, Disable.  If you have questions, be sure to let me know.



Now, lets see if we can find any information on that buried, missing, does not exist, WinPatrol.exe.  Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

Code Select Expand

:reg
HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Run


• Click the Look button to start the scan.
  
• When  finished, a notepad window will open with the results of the scan.  Please post this log in your next reply.
  

Note: The log can  also be found on your Desktop entitled SystemLook.txt

[onDvine]

Muchas gracias, Corrine!  Removing one copy of WinPatrol.exe from Startup did NOT remove both.  After rebooting,  x64_RUN is still there and WinPatrol started without any issues.

Here is content of the SystemLook log:

SystemLook 30.07.11 by jpshortstuff
Log created at 12:30 on 04/03/2015 by mj
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== reg ==========

[HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Run]
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"="1"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX4 "="1"
"c:\Program Files\Microsoft IntelliType Pro\itype.exe"="1"
"C:\Program Files (x86)\SpywareBlaster\spywareblaster.exe"="11"
"C:\Program Files (x86)\tinySpell\tinyspell.exe"="11"
"C:\PROGRAM FILES (X86)\epplus\EPROMPTER.EXE"="11"
"C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe"="11"
"C:\Users\mj\Documents\FAH\for CoreTemp\Core Temp.exe"="11"
"C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"="11"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"="21"
"C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe"="21"
"c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"="21"
"C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices"="21"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"="21"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="21"
"C:\Program Files (x86)\FAHClient\HideConsole.exe"="200"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"="21"
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"="1"
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe"="1"
"C:\Program Files\AVAST Software\Avast\setup\emupdate\269ce130-dc66-49b6-a98c-28bee70338b0.exe /check"="22"
"C:\Windows\System32\userinit.exe"="250"
"explorer.exe"="251"


-= EOF =-

[Corrine]

Excellent!  I'm glad that removing the one winpatrol.exe took care of that part of the problem.  As to the old winpatrol.exe "File does not exist", I suspect it is a leftover that got "stuck" in the registry when updating to Version 33 as it is shown as being in the BillP Studios folder:  "C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe"="11".

The easiest solution is to highlight that one item in the WinPatrol Start Up tab and select Remove.

[onDvine]

Thank you.  :smiley:   As mentioned in the original post,

... The highlighted one says "File does not exist," and I was able to disable it but can't delete it by any means tried. ...

I'll give it another try tomorrow when it's earlier and have more time to deal with any hassle, like possibly removing both unintentionally.  This afternoon I noticed that when I disable the file that doesn't exist, it also disables the remaining one that is working.  That would seem to indicate a connection between them, wouldn't it?

[Corrine]

The correct entry for WinPatrol Version 33 is  C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe - expressboot not the BillP Studios folder which you said you no longer have.  So, if removing the entry results in removing WinPatrol from startup, you can easily add it back.  First make sure the box is checked on the Options tab to "Always start WinPatrol monitor".  In the event it does not start as expected, do the following:

Click the Start up Programs tab in WinPatrol and click the Add button at the bottom of the window.
Navigate to C:\Program Files (x86)\Ruiware\WinPatrol and highlight winpatrol.exe file and click Open.

[onDvine]

It's displaying confirmation dialogue about the removal but remains in place after.  Edit:  Will try a reboot.

[onDvine]

I chose Delete File on Reboot.  It's still there, and still doesn't exist. But the current WinPatrol entry is still starting and running fine.

I appreciate all of your time and attention, Corrine.  :thumbsup: