Perfib_perfdata what is?

124 views
Skip to first unread message

justme

unread,
Jan 23, 2007, 7:57:59 PM1/23/07
to Hack the System
Can anyone please tell me what is Perfib_Perfdata located in Windows XP
Pro SP2 temp folder?

It increases in number and cannot delete, Windows says: the file is in
use.

I never saw it before, it is safe?

Regards.

andrew.t...@gmail.com

unread,
Jan 24, 2007, 12:35:19 PM1/24/07
to Hack the System
I am going to give you some free advice...

USE THE SEARCH!

Go to google. Type in "Perfib_Perfdata" (including quote marks) and
hit Google Search.

Click a link, read an absorb. Move on to next link.

Sometimes it is a lot more satisfying to learn the answer for yourself,
especially when the answer is readily available.

Antonio Pignatelli

unread,
Jan 25, 2007, 8:57:01 AM1/25/07
to hackth...@googlegroups.com
Thanks for replay.

I already did some research on Google and got confused by conclusions like: "is virus? No is Windows file?". Somewhere else I found that is Corel product extension file (I don't think is the answer I need) also not much time to deal with.

A hind would be very appreciated.

Regards.

ghostofda...@gmail.com

unread,
Jan 27, 2007, 5:17:31 PM1/27/07
to Hack the System
Here's what Microsoft had to say about this:

Perflib_Perfdataxxx.dat Files Accumulate Under %SystemRoot%\System32

Article ID : 285798
Last Review : October 31, 2006
Revision : 3.2

SUMMARY
Files with the name Perflib_Perfdataxxx.dat may accumulate under the
%SystemRoot%\System32 folder, where xxx is a random number.
MORE INFORMATION
These files are generated by processes in the normal course of
operation; however, files are orphaned when you do not shut down a
computer properly, such as by pressing the power button on a computer.

Note: It is also possible that these files can be orphaned while a
server is running. Microsoft is researching this problem and will post
more information in this article when the information becomes
available.

To delete the orphaned files, you can use an automated logon script.

Here's one solution found on www.jsifaq.com:

The best way to remove these files is to add a command in a logon
script:

del /q %SystemRoot%\System32\Perflib_Perfdata*.dat

Antonio Pignatelli

unread,
Jan 27, 2007, 7:26:28 PM1/27/07
to hackth...@googlegroups.com
Thanks mate for useful support and for your time.

I do not know how to "add a command in a logon script" so I did more research on Google.

Finally it confirmed that "Perfib_Prfdata.xxx" cannot be deleted, if so it will appear at next logon.

In my case (and others) this file is located in "SystemRoot\Temp" folder and for sure it is used by a program which seems to be "InCD" that comes with Nero.

I have this utility installed (but disabled) and don't want to uninstall cause I might need in future.

However, Perfib_Perfdata.xxx seems not to be a virus or any damaging threat, I will leave it.

The above informations can be found at the following link:  http://www.pcreview.co.uk/forums/thread-566733.php

ghostofda...@gmail.com

unread,
Jan 29, 2007, 10:12:17 AM1/29/07
to Hack the System
You're spot on Antonio. Technically there should be a Perflib_prfdata
file as it's a temp file for a Windows service, however some people
have more than 1 copy of the file and that's the problem. Yes the file
will be created on Logon but you should basically need to run the
logon script once to remove all the Perflib_prfdata files, after which
Windows will create a new one. After this step you can remove the
logon script and you should be running with 1 copy of the file
(instead of multiples). For those of you who don't know how to setup a
logon script here are the steps:

1. Logon onto your machine as an administrator
2. Right-click 'My Computer'
3. Left-click 'Manage'
4. Left-click on the plus next to 'Local Users and Groups' or double-
click on 'Local Users and Groups'
5. Left-click the 'Users' folder
6. Right-click the username that you use to logon (or double-click)
7. Left-click the 'Profile' tab
8. The second text-box is labeled 'Logon script'
9. Copy and paste 'del /q %SystemRoot%
\System32\Perflib_Perfdata*.dat' into the box (without the ' )
10. Reboot your PC and logon with your profile.
11. The logon script should now run and delete all the
Perflib_Perfdata files.
12. Once you've done this you can confirm that there is only one
Perflib_Perfdata file left.
13. Follow steps 1 -> 8 and remove the logon script.

If the Perflib_Perfdata is located in the 'Temp' folder you can change
the path in the script to read %SystemRoot%\Temp
\Perflib_Perfdata*.dat . I haven't tested this since my PC is running
fine so don't blame me if it doesn't work, but if anyone is willing to
be the guinea pig for this please let us know the outcome.

Antonio Pignatelli

unread,
Jan 29, 2007, 7:05:15 PM1/29/07
to hackth...@googlegroups.com
Hi mate, thanks for teaching me how to create a logon script.

I followed step by step your instructions but when in the "user profile properties" I clicked on the "apply" button, a warning window told me: " Path name del /q %SystemRoot%\Temp\Perflib_Perfdata*.dat is not a valid relative path name. Enter a valid relative path name."

I believe that only migh be a easy mistake in the code such as a space or else which I unsuccessfully tried to change (there might be a relation between "Windows\Temp" and "Windows\System32" folder???).The command I entered can be seen in the above warning message.

Anyway, it's sure that the boring and stubborn Perflib_Perfdata files are created at any logon by checking the created date in their properties dialogue.

Kindly regards.
Reply all
Reply to author
Forward
0 new messages