I'd verify my answer before taking it to the bank, but it looks as though the file you mentioned is merely a data file created by Windows NT Performance Counter. Windows NT Performance Counter writes results to data files, similar to the one you mentioned in your question. Information about Windows NT Performance Counter may be found at this link:
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;q146005
(REMOVE SPACES from the pasted URL.)
perflib = performance libraryperfdata = performance data
Any information I've seen related to the virus "W32/Badtrans.eml" has nothing to do with any files even slightly related to perflib files or Windows NT Performance Counter
Virus software really does two things. It first scans for known viruses, but it also monitors the system for characteristics that resemble virus activity. I have seen virus software "think" there's a virus based on the characteristics of some activity, but in reality there was not really a virus. I suspect that's what happened here, and McAfee deleted the "suspected" file because of certain characteristics related to the writing of data to that file.
I don’t think you’ll find that file on any other computer. Moreover, I don’t think the removal of that file will have any adverse effect at all.
Like I said, verify my answer before considering it correct, but that’s how I’d approach the issue.
I’d be interested to see if anyone else concurs with my theory, or if they think I’m barking up the wrong tree. (Better than saying full of ****)
Best of luck,
Maxwell
