Re: Perflib_Perfdata_***.dat
NoNoBadDog!
The same files can be created by Windows WDM and WMI; can also be created
by ATI MultiMedia Center, can also be created by Nero Burning ROM...
In fact, any number of programs can create the files. They are deleted on
shutdown, and recreated on boot. They are harmless, and should be left
alone.
Bobby
"MadDog" <Mad...@discussions.microsoft.com> wrote in message
news:039A41A5-C712-4AB5...@microsoft.com...
> They are created by the SNMP service. If you disable the service they
> won't
> be created.
>
> MD
>
>
>
> "Milt" wrote:
>
>> I periodically have files, "Perflib_Perfdata_***.dat" show up in my Temp.
>> folder. (The *** are dynamic; they change with date and time.) They
>> resist
>> being deleted. I have not tried deleting them in Safe Mode, though. I'm
>> not
>> sure what they are and if there's any reason to leave them. Can anyone
>> please
>> tell me what they are, and if it's OK to go into Safe Mode and try to
>> delete
>> them?
>>
>> Thanks,
>> Milt
Glen
genetrate them. Delete them as you want. Windows won't let you delete any
that are being used.
--
Please repost if you find the fault
Glen P
~~~~~~~~~~~~~~~~~~~~
"Milt" <Mi...@discussions.microsoft.com> wrote in message
news:FBD89967-8428-411C...@microsoft.com...
>I don't have SNMP installed so that wasn't it. I did find out by the
>process
> of elimination that if I disable the Norton Ghost 10 tray icon in
> MSConfig/Startup the files are no longer generated. So while I still don't
> know why they're there, I do know how to stop them. And I didn't want the
> Ghost icon in my "Notification Area" anyhow. Thanks for your responses.
>
> Milt
Wesley Vogel
Perflib stands for Performance library. Perfdata stands for Performance
Data.
The %SystemRoot%\System32\Perflib_Perfdataxxx.dat files are created by the
System Monitor. And/or
%userprofile%\Local Settings\Temp\Perflib_Perfdataxxx.dat.
or
C:\Documents and Settings\Your Name Here\Local
Settings\Temp\Perflib_Perfdataxxx.dat. When you shutdown normally, the file
should be deleted.
If you have an abormal shutdown, these files can become orphaned, and
accumulate on your computer.
Under some yet to be determined circumstances, these files can become
orphaned during normal operation.
The Windows Performance tool is composed of two parts: System Monitor and
Performance Logs and Alerts. With System Monitor, you can collect and view
real-time data about memory, disk, processor, network, and other activity in
graph, histogram, or report form.
To open Performance...
Start | Run | Type: perfmon.msc | OK
You can view this by opening the Task Manager. The Performance tab displays
a dynamic overview of your computer's performance, such as CPU and various
kinds of memory usage.
Also caused by:
Rundll32.exe advapi32.dll,ProcessIdleTasks
Event ID: 1000
Event Source: LoadPerf
Perflib_Perfdataxxx.dat Files Accumulate Under %SystemRoot%\System32
http://support.microsoft.com/default.aspx?scid=kb;en-us;285798
What are the %SystemRoot%\System32\Perflib_Perfdataxxx.dat files?
http://www.jsiinc.com/SUBG/TIP3300/rh3343.htm
-----
prflbmsg.dll = Perflib Event Messages
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
Logging Directory
Value Type: REG_SZ
C:\WINDOWS\system32\WBEM\Logs\
Repository Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%\system32\WBEM\Repository
Working Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%\system32\WBEM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
---
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
Perflib
Description
The Perflib subkey stores configuration data for the Windows Performance
Library, which collects and organizes data for performance tools, such as
System Monitor.
In addition to entries, the Perflib subkey contains a Language-code subkey
for each spoken language you configure for Windows 2000. The Language-code
subkey stores performance counter names and their descriptions in the
specified language. The Language-code subkey is named for the language code
for that language. For example, the counters and descriptions for the
English language are stored in a subkey named 009, the language code for
English (United States).
---
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:FBD89967-8428-411C...@microsoft.com,
Milt <Mi...@discussions.microsoft.com> hunted and pecked:
Milt
Milt
PopS
data that might be wanted, to try to speed things up.
You should be able to delete any tha aren't in use, which
would be the ones prior to the last time you restarted the
machine, so always start with the oldest ones.
They're supposed to be deleted automatically but often things
keep that from happening (crashes, power glitches, improper shut
downs, etc.).
If you can't delete old ones, then there is some sort of a
problem.
Going to Safe Mode might help delete some of them, but they'll
be regenerated on an as needed basis.
"Milt" <Mi...@discussions.microsoft.com> wrote in message
news:150DD379-E149-46F0...@microsoft.com...
Wesley Vogel
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:8B4D1D9C-9047-4EE5...@microsoft.com,