Perflib_Perfdata temporary files on T60p

[DenTP4rm]

Hey Folks,
I'm dealing with a nefarious infection in a couple of my machines. I'm hoping it's not on my Thinkpad yet. However, when I run a certain scanner on my T60p it says the "Peflib_Perfdata*.dat" file could not be scanned. This and another file are being created with each boot in the Local Settings\Temp folder.

Google searches indicate these files are created by some kind of system monitoring software. I've uninstalled Nero InCD which is one suspected culprit but the files keep getting re-created.

Does anybody know of any Thinkpad application that might be creating these files on a T60p?

[Mods: the reason I posted here and not the General HARDWARE/SOFTWARE forum is this may be specific to T60's]

thanks for your help,
DenTP4rm

[DenTP4rm]

Please, can anybody help with information on the "Peflib_Perfdata*.dat" files?
thanks
DenTP4rm

[Yacek]

Please, can anybody help with information on the "Peflib_Perfdata*.dat" files?
thanks
DenTP4rm

it's not infection Just performance logs files. Perflib is a counter for library files performace, most probably for soem .net services (not sure).
As you know the system can monitor variable parameters through specific counters and creates specific logs.

You can switch off almost all performance counters (I found them useless at home use) with a small utility called "The Extensible Performance Counter List (exctrlst.exe) GUI utility" to be found here:
http://www.microsoft.com/downloads/deta ... laylang=en

The Extensible Performance Counter List (exctrlst.exe) GUI utility will list all of the services and applications that provide registry-based performance counters on local and remote Windows 2000, Windows XP Professional, and Windows Server 2003 systems.

It displays the names and locations of the dynamic link libraries (DLLs) that support performance counters, indicates disabled counters, and lets you enable and disable the performance counters for a service.

Exctrlst displays the following information about performance counters:

Services and applications that provide performance counters
Names and locations of performance counter DLLs
Enabled and disabled performance counters
Indexes of performance objects, counter names, and help text provided by the service
Names of the open, collect, and close procedure of each counter DLL

The highest index on the system used for performance counters and their help text.