File type .rrr in Windows XP

[bweeks]

(This is the first time I have posted to TechGuide -- hope I have posted
correctly and in the right forum).

I recently noticed a new(?) file extension in Windows XP (Home edition, SP2, all available critical updates applied): ".rrr".  I searched the internet using Google and the only reference it turned up was in a recent post to this site ("Computer acting wierd...HijackThis Log" by Jason in the Tech Clinic forum) where a log from WinPFind listed several files created in the last 60 days that had this extension.

Here are some examples from my system:

C:\WINDOWS\SYSTEM32\CONFIG\sam.rrr
C:\WINDOWS\SYSTEM32\CONFIG\SAM.rrr.LOG
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.rrr.LOG

C:\Documents and Settings\Bob\s-1-5-21-4203517318-2699472163-680598973-1006.rrr

C:\Documents and Settings\Bob\S-1-5-21-4203517318-2699472163-680598973-1006.rrr.LOG

C:\Documents and Settings\LocalService\s-1-5-19.rrr
C:\Documents and Settings\LocalService\S-1-5-19.rrr.LOG

With similar related entries in:

C:\Documents and Settings\NetworkService  and
C:\Documents and Settings\Bob\Local Settings\Application Data\Microsoft\Windows

I can't view any of the .LOG files as they are contiuously "in use" as
are all the other files.

The earliest file creation dates for the files is July 12, 2005 on which
date I applied Windows critical security updates, so I suspect they are
part of Windows security meaures (unless, possibly, they are related to my PCcillin firewall?) and probably not a threat.

However, I could find no reference on the Microsoft Knowledge Base to the .rrr filetype.

Can anyone explain what these files are?

Thanks in advance.

BW

[Flipback]

That does sound like a weird extension. Open it with notepad. Maybe there is text in there.

Flip

[bweeks]

Thanks for the suggestion -- it reminded me that I forgot to post the
answer to my own question.

It turns out that Registry Mechanic (product from PC Tools software)
creates copies of the Windows Registry hive files, when you use the
"optimize registry" facility.  These files are given extension .rrr and
are used when the system boots, so you can't access them using
tools like NotePad.