This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Stress Removal

What is this file

2 min read

This thread's last reply is from February 5, 2009, 8:15 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hello In the directory C:\windows\temp their is a file named Perflib_Perfdata_2d0
Is this a virus or mal-ware or something. I did a search on the web, and it came back with antivirus forums. Does anybody know what it is. I am unable to delete it. When I do it say it is being used by another program. I have scanned my pc with spy-bot, malwarebytes, f-secure, a-squared, which by the way is the only one that found any threats, but not this file was not listed. Can I get help here or on a different discussion. Thank you Larry
http://www.bleepingcomputer.com/forums/lofiversion/index.php/t54540.html

Seems to me to be Spyware Doctor - the file disappears when I shut Spyware Doctor down and reappears again when I start it up.


So do you have spyware doctor installed.
http://www.tech-archive.net/Archive/WinXP/microsoft.public.windowsxp.perform_maintain/2006-08/msg00130.html

Programs such as EasyCleaner can create Perflib_Perfdataxxx.dat files.

Here's more than you may want to know.

Perflib stands for Performance Library. Perfdata stands for Performance
Data.

The %SystemRoot%\System32\Perflib_Perfdataxxx.dat files are created by the
System Monitor. And/or
%userprofile%\Local Settings\Temp\Perflib_Perfdataxxx.dat.
or
C:\Documents and Settings\Your Name Here\Local
Settings\Temp\Perflib_Perfdataxxx.dat. When you shutdown normally, the file
should be deleted.

If you have an abormal shutdown, these files can become orphaned, and
accumulate on your computer.

Under some yet to be determined circumstances, these files can become
orphaned during normal operation.

So this is something I don't need to worry about???? And or what about removing it?? Larry
Yes, it's not really anything to worry about.

Normally they are self-removed by the process that created them, but sometimes not.

To find out what the parent process that's creating them is, try the following.

Download Unlocker and install it to your computer.

  • Navigate to C:\windows\temp\Perflib_Perfdata_2d0 (or whatever the current file is named)
  • Right click on it and from the right click menu click on Unlocker.
  • A Window will appear. Note the Process and Process path which is displayed.
  • Send me that information please.
  • Do not attempt to use Unlocker to unlock the file.
  • Exit out of Unlocker.
here is the unlocker results.

jqs.exe C:\Windows\Temp\perflip_perfdata_1dc.dat 476 256 C:\Program Files\Java\jre6\bin\jqs.exe

Hope this tells you something it dosen't me. Thank You for your quick reply's. Larry
jqs.exe is the executable for java quickstart service, which comes with the latest versions of java and improves the startup time for java applications and applets.

Strictly speaking it doesn't really need to be run, and can be disabled if necessary. If you need to know how let me know.

It's legit though, so the perflip files created by it are perfectly safe, unless you're getting a build up of them I'd leave them alone.
Hey Gary Thank You so Very Much for your expert help with matter. I Only have the file, and the only reason I questioned it is that I could not remove it from the Temp Folder. I will leave things alone, as this is hard for me. I like to delete things, and have gotten myself in trouble more than once. Again Thank You Larry VS
You're welcome, glad we could help. :)