Control Center



If you can't view the screen shot, you may have to click the screen shot when you put the mouse over the it.
Dependant upon your browser settings.

This sleek program is another to watch out for. So be don't be tricked.

It appears that the client was browsing facebook.com, when their browser was hijacked and redirected to another site (http://free-scanner-online.biz/get.php?sc=1&id=*****). The client was duped into installing this program.

A file was downloaded to the C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\<random foldername>\ win_protection_update[random number].exe folder. (win_protection_update[random number].exe 1,978,609 bytes)

Below are entries found in the Registry(If you are unfamiliar with the registry...Leave this page NOW) and files associated with the program. Control Center  Control Center Logo

  1. Key Name: HKEY_USERS\S-1-5-21-***-***-***-***\Software\Microsoft\Windows\CurrentVersion\Run
    Class Name:
    Last Write Time: **/**/2009 - 6:42 PM
    Value 0
    Name: ccagent.exe
    Type: REG_SZ
    Data:C:\Users\<username>\AppData\Roaming\CC\ccagent.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Control Center"

You will find shortcuts to the program on the
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The following is a list of files you may find in the:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"c:\Users\<username>\AppData\Roaming\CC" Folder
            Size          Name
  1. 551,424 bytes ccagent.exe
  2. 2,016,256 bytes ccmain.exe
  3. 185 bytes settings.ini
  4. 76,256 bytes uninstall.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The following is a list of files you may find in the:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"c:\Users\<username>\AppData\Roaming\CC\faq" Folder
            Size          Name
  1. 235 bytes 7,890 guide.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The following is a list of files you may find in the:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"c:\Users\<username>\AppData\Roaming\CC\faq\images" Folder
            Size          Name
  1. 53,967 bytes 05.png
  2. 48,347 bytes 06.png
  3. 45,779 bytes 07.png
  4. 42,753 bytes 08.png
  5. 138,334 bytes 09.png
  6. 178,919 bytes 10.png


Remember to always check here: C:\WINDOWS\Prefetch

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  1. Cyber Protection System       This is the site the client was taken to.

  2. Cyber Protection System

  3. Control Center