What could be deleting a password from a program’s ini file every time I restart it

Understanding Unexpected Password Deletion in a Legacy Windows Application

Introduction

Maintaining long-standing software can sometimes present unexpected challenges, especially when operating system updates or security features interfere with functionality. Such is the case with a custom, standalone temperature monitoring program that has been in use for over 17 years. Recently, users have observed that their FTP password, stored in an INI configuration file, is being erased each time the program is restarted, despite manual edits. This article explores potential causes and troubleshooting steps to address this issue.

Background on the Application

The software in question, ThermoHID, interfaces with a temperature-detecting dongle called TEMPerHUM. It reads indoor temperature data and uploads this information to a personal website via FTP. The application is simple, installed locally on the C drive, and allows users to configure various settings including FTP server address, username, and password. Historically, these settings, including the password, have been preserved across sessions.

Recent Changes and Observations

Recently, the application began erasing the stored FTP password upon each restart, even after direct manual editing within the INI file while the application was closed. Notably, this issue appeared shortly after a Windows update, leading to speculation about potential causes:

Windows security scanning or file monitoring
Antivirus software or security tools interfering with the INI file
Changes in Windows permissions or security settings

Troubleshooting Steps and Considerations

Confirm the Issue
Ensure that the INI file is writable and that no other process is locking or overwriting it.
Make a backup of the current INI file with the correct password set, then observe if it reverts after restarting the application.
Evaluate Security Software Interference
Temporarily disable antivirus programs such as Norton to determine if they are modifying or restricting access to the INI file.
Note that in this case, disabling Norton did not resolve the issue, suggesting it may not be the culprit.
Check Windows Security Settings
Look into Windows security features that might monitor or restrict changes to configuration files.
Certain security settings appear greyed out, indicating possible system restrictions or permissions issues.
Examine System and Application Logs
Review Windows Event Viewer logs for any related entries around the time of application startup.
Verify if any security policies are active that could interfere with file modifications.
Consider Windows Updates
Since the behavior began immediately after a recent Windows update, it’s plausible that system