Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Server Protection => Topic started by: skihbr on March 29, 2005, 02:10:26 PM

Title: smccxa, smcbdc, smcbcb
Post by: skihbr on March 29, 2005, 02:10:26 PM

I installed your product yesterday.

My machine starts by itself 3 programs (smccxa.exe smcbdc.exe, smcbcb.exe).

I build a batch file that deletes these program, but they are born again randonly.

These programs use near 20% of cpu each one.

I need to kill them with task manager and run the batch file that deletes them from c:\winnt\system32

Any idea ?

Thanks for your help!!

Danilo S. Carneiro
Sao Bernardo do Campo - Sao Paulo - Brasil

Title: Re: smccxa, smcbdc, smcbcb
Post by: Lisandro on March 29, 2005, 02:18:29 PM

Welcome, Danilo
(In fact, we're quite close here in Brazil... ;D).

Maybe you could use the "Advanced File Remover" feature in RejZoR's avast! External Control available at http://www.excessive-software.tk/

RejZor is an 'old' member here. I hope you enjoy avast forum  8)
Oh, I'm the translator to Portuguese... If you find any typo or error, please, do not hesitate on posting here.  :)

Title: Re: smccxa, smcbdc, smcbcb
Post by: Lisandro on March 29, 2005, 02:21:07 PM

Oh, I forgot to post. Windows attempts to protect files that are deleted from the system folders (just in case it was an accident), so they can be restored if required. Are you using the avast Server version? Are you in the correct forum board?

Disable System Restore:
Start > Control Panel > System > System restore > Disable
Click Apply
Enable it again
Click Ok

How to disable system restore: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

After that, do another scan and if your system is clean then re-enable system restore

Title: Re: smccxa, smcbdc, smcbcb
Post by: DavidR on March 29, 2005, 05:01:14 PM

Simply deleting the files as you have found doesn't get rid of them as something is recreating them, this could be another program on your system being run. In order to run the program/s need to have registry entries. The best way to detect these is using the program HiJackThis, Download HijackThis.zip (http://www.spywareinfo.com/~merijn/files/hijackthis.zip).

A visit to Eddy's Website (http://members.home.nl/edeijl/) click the "HiJackThis Section" and also the "Malware removal instructions and applications" section, and follow the directions there and get back to us if you need more help....

You could then post the contents of the hijackthis.log here.

Title: Re: smccxa, smcbdc, smcbcb
Post by: skihbr on March 29, 2005, 10:18:47 PM

Thanks for replies.

I put my question on this forum because a choose and install
Avast trying to solve the problem I have with those named programs.

I thing they are 'virus', 'adware' or something like that.

By now, I am running the bat file below:

E:\Usr\Bin\pskill smccxa.exe
E:\Usr\Bin\pskill smcbcb.exe
E:\Usr\Bin\pskill smcbdc.exe
del /q e:\winnt\system32\smccxa.exe
del /q e:\winnt\system32\smcbdc.exe
del /q e:\winnt\system32\smcbcb.exe
del /q e:\winnt\system32\perflib*.*
E:\Usr\Bin\sleep 30
date /t >> e:\usr\matasmc.log
time /t >> e:\usr\matasmc.log
e:\matasmc.bat

and is ok.