Unable to delete unwanted file
Normally Perflib_Perfdataxxx.dat files will get deleted by themselves. If
in use, you cannot delete them. Reboot and see if Perflib_Perfdataxxx.dat
files is still there.
Has nothing to do with Prefetch.
Here's more than you may want to know.
Perflib stands for Performance library. Perfdata stands for Performance
Data.
The %SystemRoot%System32Perflib_Perfdataxxx.dat files are created by the
System Monitor. And/or
%homedrive%LocalSettingsTempPerflib_Perfdataxxx.dat.
or
C:Documents and SettingsYour Name HereLocal
SettingsTempPerflib_Perfdataxxx.dat. When you shutdown normally, the file
should be deleted.
If you have an abnormal shutdown, these files can become orphaned, and
accumulate on your computer.
Under some yet to be determined circumstances, these files can become
orphaned during normal operation.
The Windows Performance tool is composed of two parts: System Monitor and
Performance Logs and Alerts. With System Monitor, you can collect and view
real-time data about memory, disk, processor, network, and other activity in
graph, histogram, or report form.
To open Performance…
Start | Run | Type: perfmon.msc | OK
You can view this by opening the Task Manager. The Performance tab displays
a dynamic overview of your computer's performance, such as CPU and various
kinds of memory usage.
Also caused by:
Rundll32.exe advapi32.dll,ProcessIdleTasks
Event ID: 1000
Event Source: LoadPerf
Perflib_Perfdataxxx.dat Files Accumulate Under %SystemRoot%System32
» http://support.microsoft.com/default.aspx?scid=kb;en-us;285798
—–
prflbmsg.dll = Perflib Event Messages
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWBEMCIMOM
Logging Directory
Value Type: REG_SZ
C:WINDOWSsystem32WBEMLogs
Repository Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%system32WBEMRepository
Working Directory
Value Type: REG_EXPAND_SZ
%SystemRoot%system32WBEM
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionPerflib
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionPerflib
—
HKLMSOFTWAREMicrosoftWindows NTCurrentVersion
Perflib
Description
The Perflib subkey stores configuration data for the Windows Performance
Library, which collects and organizes data for performance tools, such as
System Monitor.
In addition to entries, the Perflib subkey contains a Language-code subkey
for each spoken language you configure for Windows 2000. The Language-code
subkey stores performance counter names and their descriptions in the
specified language. The Language-code subkey is named for the language code
for that language. For example, the counters and descriptions for the
English language are stored in a subkey named 009, the language code for
English (United States).
HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesEventlog
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesEventlog
ApplicationPerflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%System32prflbmsg.dll
HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesEventlog
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesEventlog
ApplicationPerflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%System32prflbmsg.dll
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlog
Application Sources
REG_MULTI_SZ
Perflib
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlog
ApplicationPerflib
EventMessageFile
Value Type: REG_EXPAND_SZ
%SystemRoot%System32prflbmsg.dll
Regards:saifiit