Vista - usrclass.dat

Good afternoon,

Yesterday, I noticed that my HDD light was flashing about twice a
second, every second, even while the computer was idle.

While I got to wondering, I decided to open Vista's Resource Monitor,
and I looked at the "Disk" section.

Sitting at the top, when sorted in Write >> ascending, sits Explorer.exe
writing to c:\users\[uname]\AppData\Local\Microsoft\usrclass.dat.

In third place sits rundll32.exe, writing to the same file.

I was just wondering what this file was, and why my computer continues
to write to the file, and how much damage this constant writing may do
to my hard drive.

Thank you,

U@xxxxxx

I had the same thing happen to me a couple of days ago. would love to see an
answr to this please.

"user@xxxxxx" wrote:

Same problems... even worst... HDD temperature: 58 degrees. I'm running Win Vista Ultimate 32bit, up-2-date. I have also another prb: When I open my browser and I type an URL(I tried Mozilla, IE5, Opera), process explorer.exe crashes, taskbar dissappears, and I have to reopen the explorer manually. From time to time, this message appears:


and I still receive messages like this one but from different sources like WinAnonimously... :|

Any option I choose, this URL is opened : hxxp://antimalwareguard.com/2009/10/?rff=http%3A%2F%2Fad.yieldmanager.com%2Fst%3Fad_type%3Diframe%26ad_size%3D180x150%26site%3D140464%26section_code%3D12708330%26cb%3D1214333197848002%26ycg%3Dm%26yyob%3D1988%26pub_redirect_unencoded%3D1%26pub_redirect%3Dhttp%3A%2F%2Fus.ard.yahoo.com%2FSIG%3D14vk09l6s%2FM%3D619213.12708330.13016353.12227498%2FD%3Dmail%2FS%3D398300009%3AREC%2FY%3DYAHOO%2FEXP%3D1214340397%2FL%3DS0i2utG_T4lT5eCxSGFBDAJBUbUieEhhQQ0ADKvV%2FB%3DX_8nQ9j8Yn4-%2FJ%3D1214333197848002%2FA%3D5366722%2FR%3D0%2F%2A&tmn=tmnanmagua&a=nm_ridmm2_ma_kw1&l=yahoo.com&f=nm_156801_563c4322413d11ddb25d156801cfffff_d70f8174f2524dbeb4f8727899fd0261&ax=1&ex=1&ed=2&h=10&mt_info=5723_0_22800:6051_0_20770&rdr=2&tmn=null&mt_info=5723_0_22800:6051_0_20770

Can someone please help!..
HDD still write/read in alert mood.. :-s

I have little doubt that your p. c. is infected.If you can use Windows
Update,update Windows Defender with the latest definitions and run a
complete system-wide full scan thoroughly.If you cannot,download the Windows
Malicious Software removal tool from the Microsoft download center from some
other machine where you can browse properly and run it locally on your
system.

"mad_dogu" <guest@xxxxxx-email.com> wrote in message
news:af10315887b68e4c3e3ec2adc0417e58@xxxxxx-gateway.com...

Same problems... even worst... HDD temperature: 58 degrees. I'm running
Win Vista Ultimate 32bit, up-2-date. I have also another prb: When I
open my browser and I type an URL(I tried Mozilla, IE5, Opera), process
explorer.exe crashes, taskbar dissappears, and I have to reopen the
explorer manually. From time to time, this message appears:
'[image: http://i140.photobucket.com/albums/r...Dogu/pic1.jpg]'
(http://i140.photobucket.com/albums/r..._Dogu/pic1.jpg)

and I still receive messages like this one but from different sources
like WinAnonimously... :|

Any option I choose, this URL is opened :
hxxp://antimalwareguard.com/2009/10/?rff=http%3A%2F%2Fad.yieldmanager.com%2Fst%3Fad_type%3Diframe%26ad_size%3D180x150%26site%3D140464%26section_code%3D12708330%26cb%3D1214333197848002%26ycg%3Dm%26yyob%3D1988%26pub_redirect_unencoded%3D1%26pub_redirect%3Dhttp%3A%2F%2Fus.ard.yahoo.com%2FSIG%3D14vk09l6s%2FM%3D619213.12708330.13016353.12227498%2FD%3Dmail%2FS%3D398300009%3AREC%2FY%3DYAHOO%2FEXP%3D1214340397%2FL%3DS0i2utG_T4lT5eCxSGFBDAJBUbUieEhhQQ0ADKvV%2FB%3DX_8nQ9j8Yn4-%2FJ%3D1214333197848002%2FA%3D5366722%2FR%3D0%2F%2A&tmn=tmnanmagua&a=nm_ridmm2_ma_kw1&l=yahoo.com&f=nm_156801_563c4322413d11ddb25d156801cfffff_d70f8174f2524dbeb4f8727899fd0261&ax=1&ex=1&ed=2&h=10&mt_info=5723_0_22800:6051_0_20770&rdr=2&tmn=null&mt_info=5723_0_22800:6051_0_20770

Can someone please help!..
HDD still write/read in alert mood.. :-s


--
mad_dogu

Win Defender up-dated made a full system scan and did not find any threats. I've scanned with nod32, lavasoft ad-ware pro 2008, and both of them found that in C:\users\username\appdata\local\temp were some .dll files that cannot be deleted. And they start at win start-up. However, both progs found that this files were trojans :| I figured out somehow and I deleted them, and now my HDD is in normal state. I think it was a prb with those files.. i don`t know exactly. But still my explorer.exe process is killed from time to time when I surf the web.