Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Control Center Malware (??)


  • Please log in to reply
4 replies to this topic

#1 manfrog

manfrog

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 16 November 2009 - 09:16 PM

Been searching all day, but can't get an answer to this.....I have been infected with this on my other computer and when I startup the screen (screenshot on the net) pops up and I can't get past it. I have disabled my wifi as I don't want it going on-line. But can't get past the window.

Tried safe mode...all other options...but it just keeps going to the "control Center" screen. Now all the instructions state download this....blah blah blah, but what happens if I can't even get by this screen to download the removal tool? I am essentially stuck on this screen and need someone to tell what to do so I can download.

Any help would be much appreciated.

M.

BC AdBot (Login to Remove)

 


#2 NZRabbitty

NZRabbitty

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 17 November 2009 - 05:51 AM

To disable temporary and be able to use your computer.
Click on SETTINGS ,
then untick everything except "allow computer to start unprotected".
click on SAVE SETTINGS , OK , CLOSE
then click on the red X in the top Right Hand corner of the window
then click on YES and the window will close aloowing your computer to operate normally till you restart your computer.
After setting saving settings the first time it remembers the setting and after clicking on settings you only need to save settings.
This is only a work around and only disables it till you restart the computer
Yo will need to remove the malware properly.

#3 NZRabbitty

NZRabbitty

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 17 November 2009 - 05:59 AM

The files to be deleted are listed below:

%UserProfile%\Application Data\CC
%UserProfile%\Application Data\CC\agent.exe
%UserProfile%\Application Data\CC\cc.exe
%UserProfile%\Application Data\CC\settings.ini
%UserProfile%\Application Data\CC\uninstall.exe
%UserProfile%\Application Data\CC\faq
%UserProfile%\Application Data\CC\faq\guide.html
%UserProfile%\Application Data\CC\faq\images
%UserProfile%\Application Data\CC\faq\images\05.png
%UserProfile%\Application Data\CC\faq\images\06.png
%UserProfile%\Application Data\CC\faq\images\07.png
%UserProfile%\Application Data\CC\faq\images\08.png
%UserProfile%\Application Data\CC\faq\images\09.png
%UserProfile%\Application Data\CC\faq\images\10.png
%UserProfile%\Desktop\Control center.lnk

The registry entries that need to be removed are as follows:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Control center
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “agent.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\CC\cc.exe”

#4 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:18 AM

Posted 17 November 2009 - 07:13 AM

Have a look at the following thread and see if you can use the suggestions there ...
http://www.bleepingcomputer.com/forums/t/271762/worst-virus-ever/
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 manfrog

manfrog
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 17 November 2009 - 11:11 AM

The files to be deleted are listed below:

%UserProfile%\Application Data\CC
%UserProfile%\Application Data\CC\agent.exe
%UserProfile%\Application Data\CC\cc.exe
%UserProfile%\Application Data\CC\settings.ini
%UserProfile%\Application Data\CC\uninstall.exe
%UserProfile%\Application Data\CC\faq
%UserProfile%\Application Data\CC\faq\guide.html
%UserProfile%\Application Data\CC\faq\images
%UserProfile%\Application Data\CC\faq\images\05.png
%UserProfile%\Application Data\CC\faq\images\06.png
%UserProfile%\Application Data\CC\faq\images\07.png
%UserProfile%\Application Data\CC\faq\images\08.png
%UserProfile%\Application Data\CC\faq\images\09.png
%UserProfile%\Application Data\CC\faq\images\10.png
%UserProfile%\Desktop\Control center.lnk

The registry entries that need to be removed are as follows:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Control center
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “agent.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\CC\cc.exe”


Thanks...could you give me some instructions on how to go about finding these files? Is it as simple as search? This "thing" is a beast it took me a couple ours using anti-malware to get it "somewhat" working, but some many functions are f'd up...no sys restore...windows popping up all over the place. Norton is messed... :thumbsup:

Sorry if these is an obvious question, but I am tired of this thing :flowers:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users