It appears that GrabPro is a product of the same people who make the Orbit Downloader. That startup item is in the "Run Once" startup location which, as its name suggests, is a place for things that are intended to run only once before they are removed from the startup queue. It is often used by uninstallers to have a cleanup program run after the next reboot to finish removing any files or registry entries their program had which for whatever reason couldn't be removed right away. So what you have there is basically an instruction left behind by the Orbit uninstaller that Windows will execute the next time you reboot.
The instruction that Orbit left behind is: rundll32.exe advpack.dll,DelNodeRunDLL32 "C:\Program Files (x86)\Orbitdownloader\GrabPro.dll"
Let's break it down:rundll32.exe
is a program by Microsoft which is included in every copy of Windows. It is used to execute specific functions found in DLL files (which are just libraries of useful functions.)
The DLL that is being invoked is advpack.dll
, another Microsoft file. It has all sorts of useful functions for programmers to use.DelNodeRunDLL32
is the particular function in AdvPack.dll that is being called upon. It deletes the file that is specified in the command: "C:\Program Files (x86)\Orbitdownloader\GrabPro.dll"
So basically what you have there is a fairly standard method used by many uninstallers to tell Windows to delete a file after the next reboot. It's neither malicious nor worth removing since it should be removed automatically by Windows on the next reboot.
Edited by Andrew, 22 March 2011 - 04:49 AM.