----
Finally!
I did use the programs suggested by Michael, but I actually found it a little before you wrote :P
Filtering out with the pid showed that it was the file pgdata/global/pgstat.tmp
See the attached image. ( see this link instead : http://tinypic.com/view.php?pic=52e73n&s=5 )
The file is being written to / replaced and closed. The size of that file is around 57kb which was reported earlier as well.
The file contains just allot of stange tokens and letters. What is used for?
/ Jennifer