Home Malware Programs Rogue Anti-Spyware Programs Control Commander

Control Commander

Posted: April 23, 2010

As a rogue anti-virus scanner, Control Commander will pretend to guard your PC against threats like viruses, Trojans and keyloggers, while taking advantage of your trust to attack your computer. While active, Control Commander will display fake system information and pop-up alerts that give an impression that your PC is host to countless infections. In addition, Control Commander may hijack your web browser or block your ability to download or use certain executable files. Because Control Commander is a significant threat and has no worthwhile features for your PC, you should remove Control Commander with care by using reputable anti-malware program.

Control Commander Wants to Control Your Computer

Control Commander is one of a long line of rogue security programs that include such members as Control Components, Privacy Center, CComponents, Control Center and Antispyware Soft, along with quite a few others. The Control Commander interface pretends to keep track of such diverse activities as licenses, firewalls, encryption, browser add-ons and media, but Control Commander's real function is to create fake infection warnings.

The main interface for Control Commander will always tell you that your system is outdated or heavily infected. Control Commander will use pop-ups like the ones below to continue this illusion:

Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now.

Antivirus software alert
Infiltration Alert
Your computer is being attacked by an internet virus. It could be a password-stealing attack, a Trojan - dropper or similar.
Details
Attack from: IP Address, port 39096
Attacked Port: 30516
Threat: Win32/Nuqel.E

Windows Security Alert
Application cannot be executed. The file cmd.exe is infected. Do you want to active your antivirus software now?

You can relax about all of these frightful warnings, since Control Commander can't detect or delete infections or other PC threats. In fact, Control Commander may even use these errors to stop you from launching certain applications, particularly applications related to malware removal or system maintenance.

Even Your Browser Isn't Safe from Control Commander

Control Commander may also try to hijack your web browser. Common signs of a browser hijacking consist of:

  • Change homepage settings. Your homepage may be set to Control Commander's own website or to another malicious website. Any attempts to undo this change may be rolled back once you reboot your computer.
  • The appearance of strange links in error pages, search engine results or other text-based content. Hijackers like Control Commander can add links to innocent content as well as force the display of fake text content like error pages.
  • Being redirected to strange sites without your consent. Control Commander is particularly likely to do this after you click a search engine link, but a hijack redirect can take place at any time regardless of your interaction or lack thereof with a website.

The only way to take back control of your PC is to remove Control Commander. It's strongly recommended that you use a good anti-malware program to delete Control Commander, since trying to delete Control Commander manually is very likely to leave trace components behind that can harm your computer. Any system scans should be done in Safe Mode if possible, to minimize any chances of Control Commander resisting removal.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\CC\
    2 %AppData%\CC\cc.exe
    3 %AppData%\CC\guide.html
    4 %AppData%\CC\settings.ini
    5 %AppData%\CC\uninstall.exe
    6 %Desctop%\Control Center.lnk
    7 %Documents and Settings%\[UserName]\Application Data\Control Commander\ccagent.exe
    8 %Documents and Settings%\[UserName]\Application Data\Control Commander\ccmain.exe
    9 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\guide.html
    10 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\05.png
    11 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\06.png
    12 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\07.png
    13 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\08.png
    14 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\09.png
    15 %Documents and Settings%\[UserName]\Application Data\Control Commander\faq\images\10.png
    16 %Documents and Settings%\[UserName]\Application Data\Control Commander\settings.ini
    17 %Documents and Settings%\[UserName]\Application Data\Control Commander\uninstall.exe
    18 %Documents and Settings%\[UserName]\Desktop\Control Commander.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "C:\Documents and Settings\[UserName]\Application Data\CC\cc.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "ccmain.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ccagent.exe"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Control Commander
Loading...