What are Perflib_Perfdata_e08.dat files?

J

Jerry

As of recently my temporary folder started to
fill with file called Perflib_Perfdata_***.dat.
The *** part varies and all files are 16 KB.

Anyone can tell me what this is?
 
W

Wesley Vogel

Here's more than you may want to know.

Perflib stands for Performance library. Perfdata stands for Performance
Data.

The %SystemRoot%\System32\Perflib_Perfdataxxx.dat files are created by the
System Monitor. And/or
%homedrive%\LocalSettings\Temp\Perflib_Perfdataxxx.dat.
or
C:\Documents and Settings\Your Name Here\Local
Settings\Temp\Perflib_Perfdataxxx.dat. When you shutdown normally, the file
should be deleted.

If you have an abormal shutdown, these files can become orphaned, and
accumulate on your computer.

Under some yet to be determined circumstances, these files can become
orphaned during normal operation.

The Windows Performance tool is composed of two parts: System Monitor and
Performance Logs and Alerts. With System Monitor, you can collect and view
real-time data about memory, disk, processor, network, and other activity in
graph, histogram, or report form.

To open Performance...
Start | Run | Type: perfmon.msc | OK

You can view this by opening the Task Manager. The Performance tab displays
a dynamic overview of your computer's performance, such as CPU and various
kinds of memory usage.

Also caused by:
Rundll32.exe advapi32.dll,ProcessIdleTasks
Event ID: 1000
Event Source: LoadPerf

Perflib_Perfdataxxx.dat Files Accumulate Under %SystemRoot%\System32
http://support.microsoft.com/default.aspx?scid=kb;en-us;285798

What are the %SystemRoot%\System32\Perflib_Perfdataxxx.dat files?
http://www.jsiinc.com/SUBG/TIP3300/rh3343.htm

-----

prflbmsg.dll = Perflib Event Messages

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
Logging Directory
Value Type: REG_SZ
C:\WINDOWS\system32\WBEM\Logs\

Repository Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%\system32\WBEM\Repository

Working Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%\system32\WBEM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
---

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
Perflib

Description
The Perflib subkey stores configuration data for the Windows Performance
Library, which collects and organizes data for performance tools, such as
System Monitor.

In addition to entries, the Perflib subkey contains a Language-code subkey
for each spoken language you configure for Windows 2000. The Language-code
subkey stores performance counter names and their descriptions in the
specified language. The Language-code subkey is named for the language code
for that language. For example, the counters and descriptions for the
English language are stored in a subkey named 009, the language code for
English (United States).
---

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
Application Sources
REG_MULTI_SZ
Perflib

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
Application\Perflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%\System32\prflbmsg.dll

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
J

Jerry

A great and detailed answer! Thank you a lot.

I was just directed in another forum to look at
the Diskeeper, and that proved to be the
culprit. When I stop the Diskeeper service, the
Perflib_Perfdataxxx.dat file is deleted. If I start
it again, a new Perflib_Perfdataxxx.dat file gets
created. I'll continue searching if there is a
way to force Diskeeper to clean behind itself
and will let you know if I find the answer.


| Here's more than you may want to know.
|
| Perflib stands for Performance library. Perfdata stands for Performance
| Data.
|
| The %SystemRoot%\System32\Perflib_Perfdataxxx.dat files are created by the
| System Monitor. And/or
| %homedrive%\LocalSettings\Temp\Perflib_Perfdataxxx.dat.
| or
| C:\Documents and Settings\Your Name Here\Local
| Settings\Temp\Perflib_Perfdataxxx.dat. When you shutdown normally, the
file
| should be deleted.
|
| If you have an abormal shutdown, these files can become orphaned, and
| accumulate on your computer.
|
| Under some yet to be determined circumstances, these files can become
| orphaned during normal operation.
|
| The Windows Performance tool is composed of two parts: System Monitor and
| Performance Logs and Alerts. With System Monitor, you can collect and
view
| real-time data about memory, disk, processor, network, and other activity
in
| graph, histogram, or report form.
|
| To open Performance...
| Start | Run | Type: perfmon.msc | OK
|
| You can view this by opening the Task Manager. The Performance tab
displays
| a dynamic overview of your computer's performance, such as CPU and various
| kinds of memory usage.
|
| Also caused by:
| Rundll32.exe advapi32.dll,ProcessIdleTasks
| Event ID: 1000
| Event Source: LoadPerf
|
| Perflib_Perfdataxxx.dat Files Accumulate Under %SystemRoot%\System32
| http://support.microsoft.com/default.aspx?scid=kb;en-us;285798
|
| What are the %SystemRoot%\System32\Perflib_Perfdataxxx.dat files?
| http://www.jsiinc.com/SUBG/TIP3300/rh3343.htm
|
| -----
|
| prflbmsg.dll = Perflib Event Messages
|
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
| Logging Directory
| Value Type: REG_SZ
| C:\WINDOWS\system32\WBEM\Logs\
|
| Repository Directory
| Value Type: REG_EXPAND_SZ
| %SystemRoot%\system32\WBEM\Repository
|
| Working Directory
| Value Type: REG_EXPAND_SZ
| %SystemRoot%\system32\WBEM
|
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
|
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
| ---
|
| HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
| Perflib
|
| Description
| The Perflib subkey stores configuration data for the Windows Performance
| Library, which collects and organizes data for performance tools, such as
| System Monitor.
|
| In addition to entries, the Perflib subkey contains a Language-code subkey
| for each spoken language you configure for Windows 2000. The Language-code
| subkey stores performance counter names and their descriptions in the
| specified language. The Language-code subkey is named for the language
code
| for that language. For example, the counters and descriptions for the
| English language are stored in a subkey named 009, the language code for
| English (United States).
| ---
|
| HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
| Application Sources
| REG_MULTI_SZ
| Perflib
|
| HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\
| Application\Perflib
| EventMessageFile
| Value Type: REG_EXPAND_SZ
| %SystemRoot%\System32\prflbmsg.dll
|
| HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
| Application Sources
| REG_MULTI_SZ
| Perflib
|
| HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\
| Application\Perflib
| EventMessageFile
| Value Type: REG_EXPAND_SZ
| %SystemRoot%\System32\prflbmsg.dll
|
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
| Application Sources
| REG_MULTI_SZ
| Perflib
|
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
| Application\Perflib
| EventMessageFile
| Value Type: REG_EXPAND_SZ
| %SystemRoot%\System32\prflbmsg.dll
|
| --
| Hope this helps. Let us know.
|
| Wes
| MS-MVP Windows Shell/User
|
| In | Jerry <[email protected]> hunted and pecked:
| > As of recently my temporary folder started to
| > fill with file called Perflib_Perfdata_***.dat.
| > The *** part varies and all files are 16 KB.
| >
| > Anyone can tell me what this is?
|
 
W

Wesley Vogel

Jerry,

If you cannot delete the Perflib_Perfdataxxx.dat file(s) it means that it's
still in use.

Keep having fun! :)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
B

bumtracks

Maybe, go to Services / Performance logs and Alerts - and set it manual, if
nothing else turn it on the perfdata files should stop.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top