RO????.bac & RO????.tmp.LOG Files ?! ...

Where ???? is a 4 digit hexadecimal number, I've discovered hundreds
of these file pairs in my C:\Windows\System32 on each of my networked
systems running Windows XP Home. All the RO????.tmp.LOG files are 0
bytes and the corresponding RO????.bac vary in size up to about 20 mB.
Does anyone know what these are? I took a copy of all burned to CD
then deleted them and everything seems to work OK ....

Stephen,

I'm working with another user in a different group right now with the same
problem. If we find what they are I'll let you know

All the best,
--
George Aker aka SG
Google is your friend www.google.com
Anything else is just a search engine
"Stephen G. Giannoni" wrote in message
...
Where ???? is a 4 digit hexadecimal number, I've discovered hundreds
of these file pairs in my C:\Windows\System32 on each of my networked
systems running Windows XP Home. All the RO????.tmp.LOG files are 0
bytes and the corresponding RO????.bac vary in size up to about 20 mB.
Does anyone know what these are? I took a copy of all burned to CD
then deleted them and everything seems to work OK ....

I suspect that they might have something to do with System Restore.

After deleting them, I went into System Restore and nearly all the
restore points were gone ...

On Wed, 2 Mar 2005 10:34:01 -0500, "SG" wrote:

Stephen,

I'm working with another user in a different group right now with the same
problem. If we find what they are I'll let you know

All the best,

Stephen,

The other user stated the file date and times do not correspond to system
restore points, so at this point it's not known if SR has anything to do
with them. Also stated his system was bought new on 5/4/2004 and these files
were dated back to 8/31/2003.

All the best,
--
George Aker aka SG
Google is your friend www.google.com
Anything else is just a search engine
"Stephen G. Giannoni" wrote in message
...
I suspect that they might have something to do with System Restore.

After deleting them, I went into System Restore and nearly all the
restore points were gone ...

On Wed, 2 Mar 2005 10:34:01 -0500, "SG" wrote:

Stephen,

I'm working with another user in a different group right now with the
same
problem. If we find what they are I'll let you know

All the best,

Only a majority of my Restore points were deleted; one or two still
remained.

I think these files might contain a kind of supplementary information,
perhaps when some element(s) of the system undergo a particularly
drastic change, and might not be needed for some routine "minor"
Restore points.

On Wed, 2 Mar 2005 11:52:30 -0500, "SG" wrote:

Stephen,

The other user stated the file date and times do not correspond to system
restore points, so at this point it's not known if SR has anything to do
with them. Also stated his system was bought new on 5/4/2004 and these files
were dated back to 8/31/2003.

All the best,

Another point. These files are easily deleted (unlike critical System
stuff), although there is some evidence of some backup character (2
corresponding files for each 4 digit hexadecimal designation).

On Wed, 2 Mar 2005 11:52:30 -0500, "SG" wrote:

Stephen,

The other user stated the file date and times do not correspond to system
restore points, so at this point it's not known if SR has anything to do
with them. Also stated his system was bought new on 5/4/2004 and these files
were dated back to 8/31/2003.

All the best,

What would constitute a 'minor' restore point?

--
Colin Barnhorst [MVP Windows - Virtual Machine]
(Reply to the group only unless otherwise requested)
"Stephen G. Giannoni" wrote in message
...
Only a majority of my Restore points were deleted; one or two still
remained.

I think these files might contain a kind of supplementary information,
perhaps when some element(s) of the system undergo a particularly
drastic change, and might not be needed for some routine "minor"
Restore points.

On Wed, 2 Mar 2005 11:52:30 -0500, "SG" wrote:

Stephen,

The other user stated the file date and times do not correspond to system
restore points, so at this point it's not known if SR has anything to do
with them. Also stated his system was bought new on 5/4/2004 and these
files
were dated back to 8/31/2003.

All the best,

Perhaps a routine "System Check Point" and no software installations
or deletions? Maybe certain Windows updates?

On Wed, 2 Mar 2005 11:53:00 -0700, "Colin Barnhorst"
wrote:

What would constitute a 'minor' restore point?

System Restore only does one kind of restore point. There are no other undo
points saved.

--
Colin Barnhorst [MVP Windows - Virtual Machine]
(Reply to the group only unless otherwise requested)
"Stephen G. Giannoni" wrote in message
...
Perhaps a routine "System Check Point" and no software installations
or deletions? Maybe certain Windows updates?

On Wed, 2 Mar 2005 11:53:00 -0700, "Colin Barnhorst"
wrote:

What would constitute a 'minor' restore point?

The SR deletion must be coincidental unless some malware is coming into play
here. The System Restore file store is located under "System Volume
Information."

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Stephen G. Giannoni" wrote in message
...
Another point. These files are easily deleted (unlike critical System
stuff), although there is some evidence of some backup character (2
corresponding files for each 4 digit hexadecimal designation).

On Wed, 2 Mar 2005 11:52:30 -0500, "SG" wrote:

Stephen,

The other user stated the file date and times do not correspond to system
restore points, so at this point it's not known if SR has anything to do
with them. Also stated his system was bought new on 5/4/2004 and these
files
were dated back to 8/31/2003.

All the best,

Mighty strong coincidence ! Same action on both my systems BTW.

Just last week I was considering using the System Restore and had an
abundance of points to choose from. After the deletions, only 2.

OK, if the files are not related to System Restore, then WHAT ARE
they?

Keep in mind that all the file names start with RO (Restore
O(something)?) ...

On Wed, 2 Mar 2005 11:33:36 -0800, "Michael Solomon \(MS-MVP\)"
wrote:

The SR deletion must be coincidental unless some malware is coming into play
here. The System Restore file store is located under "System Volume
Information."

I don't know what they are, I have no such corresponding file on either of
my two networked systems, not in the location you specified or anywhere
else. Further, the deletion of "tmp" files should have no effect on any
function on your computer.

You might want to make sure you antivirus is up to date and run a virus
scan. Also, you should probably check for any malware on your systems. I
would suggest you download, install and run Ad Aware.

I don't know what those files are nor should they have any effect on System
Restore.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Stephen G. Giannoni" wrote in message
...
Mighty strong coincidence ! Same action on both my systems BTW.

Just last week I was considering using the System Restore and had an
abundance of points to choose from. After the deletions, only 2.

OK, if the files are not related to System Restore, then WHAT ARE
they?

Keep in mind that all the file names start with RO (Restore
O(something)?) ...

On Wed, 2 Mar 2005 11:33:36 -0800, "Michael Solomon \(MS-MVP\)"
wrote:

The SR deletion must be coincidental unless some malware is coming into
play
here. The System Restore file store is located under "System Volume
Information."

Thanks Mike; good advice, and done all that stuff as SOP.

BTW, using NAV 2004, Norton Personanal Firewall 2005, and Spyware
Doctor. I suppose that any of these might be storing info in those
files.

However, deleting them definitely removed potential System Restore
points ....

On Wed, 2 Mar 2005 14:18:49 -0800, "Michael Solomon \(MS-MVP\)"
wrote:

I don't know what they are, I have no such corresponding file on either of
my two networked systems, not in the location you specified or anywhere
else. Further, the deletion of "tmp" files should have no effect on any
function on your computer.

You might want to make sure you antivirus is up to date and run a virus
scan. Also, you should probably check for any malware on your systems. I
would suggest you download, install and run Ad Aware.

I don't know what those files are nor should they have any effect on System
Restore.

Well, I honestly don't know what those files are or what might be creating
them.

You might check the event viewer to see if the files correspond to some
issue that might be regularly coming up on your system; note, it could be
some background issues so you might not even be aware. Open Control Panel,
open Administrative Tools, open Event Viewer and look for errors in the
various sections. When you find one, double click, the information
contained within might give a clue as to what's going on.

Also, have you checked the properties of those time files, right click,
select properties, there may be information in the properties that might
give a clue as to the source of those files.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Stephen G. Giannoni" wrote in message
...
Thanks Mike; good advice, and done all that stuff as SOP.

BTW, using NAV 2004, Norton Personanal Firewall 2005, and Spyware
Doctor. I suppose that any of these might be storing info in those
files.

However, deleting them definitely removed potential System Restore
points ....

On Wed, 2 Mar 2005 14:18:49 -0800, "Michael Solomon \(MS-MVP\)"
wrote:

I don't know what they are, I have no such corresponding file on either of
my two networked systems, not in the location you specified or anywhere
else. Further, the deletion of "tmp" files should have no effect on any
function on your computer.

You might want to make sure you antivirus is up to date and run a virus
scan. Also, you should probably check for any malware on your systems. I
would suggest you download, install and run Ad Aware.

I don't know what those files are nor should they have any effect on
System
Restore.

Stephen,

What name brand system do you have and when did you purchase it?
I'm asking because I want to see if yours and the other poster has the same
machine.

All the best,
--
George Aker aka SG
Google is your friend www.google.com
Anything else is just a search engine
"Stephen G. Giannoni" wrote in message
...
Thanks Mike; good advice, and done all that stuff as SOP.

BTW, using NAV 2004, Norton Personanal Firewall 2005, and Spyware
Doctor. I suppose that any of these might be storing info in those
files.

However, deleting them definitely removed potential System Restore
points ....

On Wed, 2 Mar 2005 14:18:49 -0800, "Michael Solomon \(MS-MVP\)"
wrote:

I don't know what they are, I have no such corresponding file on either
of
my two networked systems, not in the location you specified or anywhere
else. Further, the deletion of "tmp" files should have no effect on any
function on your computer.

You might want to make sure you antivirus is up to date and run a virus
scan. Also, you should probably check for any malware on your systems.
I
would suggest you download, install and run Ad Aware.

I don't know what those files are nor should they have any effect on
System
Restore.