msaccrt directory

This posting is provided "AS IS" with no warranties, and confers no rights.

   I assembled a new PC with ASUS motherboard and ATI All in Wonder PCI Express 2006 edition Radeon X1300 video card.
After I installed Windows XP and all motherboard and video card related programs, I noticed that there is a subdirectory in Program Files directory named msaccrt.  Inside of the msaccrt directory there is Access97 directory with some MSAccess related files in it. You can see the listing in the attached file.  When I tried to investigate what process is using files in this directory, Process Monitor reffers only to explorer.exe.  The File Monitor confirms that, see the attached file, every time I open a Search windows in Windows explorer I'm getting that.  I tried to search for this stuff on the distribution CDs but was not able to find it.  I'm almost sure that it's related to ATI installation but ATI support would not confirm or deny this.  
Can anybody, please, explain what is responsible for this?
2006-08-31_141832_FileMonAccess.zip

Author	Message Share Topic Printable Version Delicious Digg Facebook Furl Google MySpace Newsvine reddit StumbleUpon Translate Twitter Windows Live Yahoo Bookmarks Topic Search Topic Options Post Reply Create New Topic
edgrin Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 31 August 2006 Online Status: Offline Posts: 5	Post Options Post Reply Quote edgrin Report Post Quote Reply Topic: msaccrt directory Posted: 31 August 2006 at 2:22pm
	I assembled a new PC with ASUS motherboard and ATI All in Wonder PCI Express 2006 edition Radeon X1300 video card. After I installed Windows XP and all motherboard and video card related programs, I noticed that there is a subdirectory in Program Files directory named msaccrt. Inside of the msaccrt directory there is Access97 directory with some MSAccess related files in it. You can see the listing in the attached file. When I tried to investigate what process is using files in this directory, Process Monitor reffers only to explorer.exe. The File Monitor confirms that, see the attached file, every time I open a Search windows in Windows explorer I'm getting that. I tried to search for this stuff on the distribution CDs but was not able to find it. I'm almost sure that it's related to ATI installation but ATI support would not confirm or deny this. Can anybody, please, explain what is responsible for this? 2006-08-31_141832_FileMonAccess.zip

plop Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 07 June 2005 Location: United States Online Status: Offline Posts: 240	Post Options Post Reply Quote plop Report Post Quote Reply Posted: 31 August 2006 at 3:40pm
	Part of Office components (which wasn't installed inadvertedly...) as the file you uploaded confirms:
	This posting is provided "AS IS" with no warranties, and confers no rights. [IMG]http://i2.tinypic.com/t7ocw3.png">

edgrin Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 31 August 2006 Online Status: Offline Posts: 5	Post Options Post Reply Quote edgrin Report Post Quote Reply Posted: 31 August 2006 at 4:59pm
	Well, probably, I was not clear enough: the directory in question appeared before I installed Office and as you can see it has Access97 in it that belongs to Office 8, I'm using Office 11.

plop Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 07 June 2005 Location: United States Online Status: Offline Posts: 240	Post Options Post Reply Quote plop Report Post Quote Reply Posted: 31 August 2006 at 5:32pm
	The directory likely appeared sometime during office installation, as for Access97 and/or older office components- normally included for backward compatibility. You should be able to confirm by checking the date/time stamps as well as any other info directly retrieved from properties.
	This posting is provided "AS IS" with no warranties, and confers no rights. [IMG]http://i2.tinypic.com/t7ocw3.png">

edgrin Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 31 August 2006 Online Status: Offline Posts: 5	Post Options Post Reply Quote edgrin Report Post Quote Reply Posted: 31 August 2006 at 6:24pm
	As I said before this directory appeared before Office installation. It appeared after I installed motheboard and video card utilities. This directory is not part of Office 2003 installation.

plop Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 07 June 2005 Location: United States Online Status: Offline Posts: 240	Post Options Post Reply Quote plop Report Post Quote Reply Posted: 31 August 2006 at 6:58pm
	Update: These files seem to be bundled in old(er) InstallShield packages (merged modules) and/or programs that use Access database engine. See: http://community.installshield.com/showthread.php?t=94500 (post#3*) Which means just about any component added/installed at that time could be the reason. (You could try looking for creation time stamps against the list of added programs) At any rate they don't fit the "malware" bill.
	This posting is provided "AS IS" with no warranties, and confers no rights. [IMG]http://i2.tinypic.com/t7ocw3.png">

edgrin Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 31 August 2006 Online Status: Offline Posts: 5	Post Options Post Reply Quote edgrin Report Post Quote Reply Posted: 01 September 2006 at 1:33pm
	Thanks for your attention to my request. I'm still puzzled though, why Access97 is hooked up to explorer. As you can see from the second picture in my document, when I do search on ANY directory, the explorer activates Access97. I don�t understand what is purpose of this and how it�s done.

plop Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 07 June 2005 Location: United States Online Status: Offline Posts: 240	Post Options Post Reply Quote plop Report Post Quote Reply Posted: 01 September 2006 at 7:11pm
	If you had saved the list of files (vs image) locally (as included in top 2 lines here and searched further, it would have brought you to: ODE97: List of Files You Can Redistribute with ODE Run-Time Application(kb163535) which contains all files and points to redist package, runtime created with access(97) developer edition. Presumably created by third party utility added to the system. SageKey Software:Access 97 Runtime Installation is an example of such company (which may or may not be the source), specializing in dists of Office Developer Environment packages bundled in Wise Installation Wizards, Windows Installer (.Msi) or InstallShield packages, compatible with all windows versions and office/access. (i.e: independent runtime). As mentioned, the program that was added at that time* could be any third-party package. You could investigate with Process explorer, Autoruns etc to check all loaded/resident dependencies. Or you could try MSI inventory and editiong tools (google for "msiinv.exe", "orca.msi" ) to analyze further. (locally and installation media sources). Nevertheless you could ren/move the suspicious dir to another (backup) location and see what is likely to break... Or as repeatedly mentioned, search all files filtered by "created/modified" stamps within the same range of those files/dir. (keep in mind that certain files retain their original time vs relative time, thus created/modified should be reversed). As for explorer's report in filemon, Windows explorer is constantly "busy" keeping tracks of MRUs (mostused), thus performing search is likely to cycle through previously searched/visited points. That said, unless you're willing to put up with excessive time &efforts it'll take, IMHO it's safe enough* to let go
	This posting is provided "AS IS" with no warranties, and confers no rights. [IMG]http://i2.tinypic.com/t7ocw3.png">

plop Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 07 June 2005 Location: United States Online Status: Offline Posts: 240	Post Options Post Reply Quote plop Report Post Quote Reply Posted: 01 September 2006 at 8:29pm
	You might find this useful: http://www.fnprg.com/forum/viewtopic.php?p=24471&sid=bd0 5d4871b55d3c69fe301e328a61be3 If original solution is no longer searchable, try Roxio forum search. (Looks like it's part of ATI's Multimedia Center application and DAO/MDAC installer)
	This posting is provided "AS IS" with no warranties, and confers no rights. [IMG]http://i2.tinypic.com/t7ocw3.png">

edgrin Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 31 August 2006 Online Status: Offline Posts: 5	Post Options Post Reply Quote edgrin Report Post Quote Reply Posted: 04 September 2006 at 7:33pm
	Once again, thanks for your help.

msaccrt directory

ODE97: List of Files You Can Redistribute with ODE Run-Time Application(kb163535) which contains all files and points to redist package, runtime created with access(97) developer edition. Presumably created by third party utility added to the system.