CCC.exe

[PapaKringle]

CCC.exe runs at each login on my pc, and. it only runs on my account (Administrator)

My video card is not an ATI video card and CCC.exe is not even located at default folder for ATI's CCC, which means it's not the ATI Catalyst Control Center.

It's not in the start up but starts automatically and it spikes my CPU Usage up to nearly 100% and makes my desktop run slow.

I have performed virus and malware scans with Microsoft Security Essentials, Spybot Search & Destroy, and IOBit Malware Fighter, but neither has reported this program as a threat.

I tried deleting the file, but restarts at login from a different folder in C:\Users\FDC3\AppData\Local directory. The folder is usually named ****.tmp The 1st character being a letter and the remaining 3 composed of numbers.

After installing Comodo Firewall I was alerted that this program makes attempts to connect to the internet with the destination address being 69.162.75.155, destination port 80.

I suspect that it may be a keylogger since my PayPal account was recently compromised. Please help me remove this program.

FDC3-PC.txt

Firewall alert.htm

[jeffce]

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  
• The fixes are specific to your problem and should only be used for the issues on this machine.
  
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  
• It's often worth reading through these instructions and printing them for ease of reference.
  
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  
• Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete anything unless instructed to.

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data.

Vista and Windows 7 users:

These tools MUST be run from the executable (.exe) every time you run them

with Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

---------

[jeffce]

Please download DDS from either of these links

LINK 1

LINK 2

and save it to your desktop.

• Disable any script blocking protection
  
• Right-click and Run as Administrator dds to run the tool.
  
• When done, two DDS.txt's will open.
  
• Save both reports to your desktop.
  

---------------------------------------------------

Please include the contents of the following in your next reply:

DDS.txt

Attach.txt

----------

Please download aswMBR to your desktop.

• Double click the aswMBR icon to run it.
  
• Click the Scan button to start scan.
  
• If you are asked to update the Avast Virus database please allow it to do so.
  
• When it finishes, press the save log button, save the logfile to your desktop and attach its contents in your next reply.

Click the image to enlarge it

----------

[jeffce]

Still here?

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!