PDA

View Full Version : Ghost backup files???


JElmWin
January 30th, 2004, 02:31 PM
Hello,
I have these three files that keep appearing, with every boot-up, on my desktop.
General info is as follows:
backup-20040130-135551-612
backup-20040130-135551-612.dll
backup-20040130-135551-612

Expanded info on third file:

;INF file for RunExeActiveX.ocx
;DestDir can be 10 for Windows directory, 11 for Windows\System(32) directory, or left blank for the Occache directory.

[version]
signature="$CHICAGO$"
AdvancedINF=2.0

[DefaultInstall]
CopyFiles=install.files
RegisterOCXs=RegisterFiles
AddReg=AddToRegistry

[RInstallApplicationFiles]
CopyFiles=install.files
RegisterOCXs=RegisterFiles
AddReg=AddToRegistry
[DestinationDirs]
install.files=11

[SourceDisksNames]
1=%DiskName%,RunExeActiveX.CAB,1

[Add.Code]
RunExeActiveX.ocx=RunExeActiveX.ocx
Comdlg32.ocx=Comdlg32.ocx
MSSTKPRP.DLL=MSSTKPRP.DLL
msvbvm60.dll=msvbvm60.dll
OLEAUT32.DLL=OLEAUT32.DLL
OLEPRO32.DLL=OLEPRO32.DLL
ASYCFILT.DLL=ASYCFILT.DLL
STDOLE2.TLB=STDOLE2.TLB
COMCAT.DLL=COMCAT.DLL

[install.files]
RunExeActiveX.ocx=RunExeActiveX.ocx
Comdlg32.ocx=Comdlg32.ocx
MSSTKPRP.DLL=MSSTKPRP.DLL
msvbvm60.dll=msvbvm60.dll
OLEAUT32.DLL=OLEAUT32.DLL
OLEPRO32.DLL=OLEPRO32.DLL
ASYCFILT.DLL=ASYCFILT.DLL
STDOLE2.TLB=STDOLE2.TLB
COMCAT.DLL=COMCAT.DLL

[SourceDisksFiles]
RunExeActiveX.ocx=1
Comdlg32.ocx=1
MSSTKPRP.DLL=1
msvbvm60.dll=1
OLEAUT32.DLL=1
OLEPRO32.DLL=1
ASYCFILT.DLL=1
STDOLE2.TLB=1
COMCAT.DLL=1

[RunExeActiveX.ocx]
file-win32-x86=thiscab
RegisterServer=yes
clsid={739E8D90-2F4C-43AD-A1B8-66C356FCEA35}
DestDir=
FileVersion=1,0,0,7

[Comdlg32.ocx]
file-win32-x86=thiscab
RegisterServer=yes
clsid={F9043C85-F6F2-101A-A3C9-08002B2F49FB}
DestDir=11
FileVersion=6,0,84,18

[MSSTKPRP.DLL]
file-win32-x86=thiscab
RegisterServer=yes
DestDir=11
FileVersion=6,0,81,69

[msvbvm60.dll]
file-win32-x86=thiscab
RegisterServer=yes
DestDir=11
FileVersion=6,0,88,77

[OLEAUT32.DLL]
file-win32-x86=thiscab
RegisterServer=yes
DestDir=11
FileVersion=2,40,4275,1

[OLEPRO32.DLL]
file-win32-x86=thiscab
RegisterServer=yes
DestDir=11
FileVersion=5,0,4275,1

[ASYCFILT.DLL]
file-win32-x86=thiscab
RegisterServer=no
DestDir=11
FileVersion=2,40,4275,1

[STDOLE2.TLB]
file-win32-x86=thiscab
RegisterServer=no
DestDir=11
FileVersion=2,40,4275,1

[COMCAT.DLL]
file-win32-x86=thiscab
RegisterServer=yes
DestDir=11
FileVersion=4,71,1460,1

[Setup Hooks]
AddToRegHook=AddToRegHook

[AddToRegHook]
InfSection=DefaultInstall2

[DefaultInstall2]
AddReg=AddToRegistry

[AddToRegistry]
HKLM,"SOFTWARE\Classes\CLSID\{739E8D90-2F4C-43AD-A1B8-66C356FCEA35}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}"
HKLM,"SOFTWARE\Classes\CLSID\{739E8D90-2F4C-43AD-A1B8-66C356FCEA35}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}"
HKCR,"Licenses",,,"Licensing: Copying the keys may be a violation of established copyrights."

[RegisterFiles]
%11%\COMCAT.DLL
%11%\OLEPRO32.DLL
%11%\OLEAUT32.DLL
%11%\msvbvm60.dll
%11%\MSSTKPRP.DLL
%11%\Comdlg32.ocx
%11%\RunExeActiveX.ocx

Digital signature says Gateway, time stamp 8/24/01. I believe this is the day I first booted this computer?

JElmWin
January 31st, 2004, 08:25 PM
:-\
I see this wasn't a productive post. After an exhaustive search I was able to dtermine that these were orphaned registry entries. I did a thorough cleaning of my registry. That seems to have fixed it. Of course, in the process more orphans appeared.
But hey, I did finally remove every trace of AOL from my system!
Cheers ;D
John