May 06

ACommander Adware Removal Instructions

The Emsisoft malware research team has discoverd a new outbreak of the ACommander adware. Emsisoft Anti-Malware detects this malware as Adware.Win32.ACommander.

ACommander is a rogue security program, this is a new variant from Control Components / Control Center.  A rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Create new files:

  • %UserProfile%\Application Data\ACommander\settings.ini
  • %UserProfile%\Application Data\ACommander\uninstall.exe
  • %UserProfile%\Application Data\ACommander\ccagent.exe
  • %UserProfile%\Application Data\ACommander\ccmain.exe
  • %UserProfile%\Application Data\ACommander\faq\guide.html
  • %UserProfile%\Application Data\ACommander\faq\images\06.png
  • %UserProfile%\Application Data\ACommander\faq\images\07.png
  • %UserProfile%\Application Data\ACommander\faq\images\08.png
  • %UserProfile%\Application Data\ACommander\faq\images\09.png
  • %UserProfile%\Application Data\ACommander\faq\images\10.png
  • %UserProfile%\Application Data\ACommander\faq\images\05.png
  • %UserProfile%\Desktop\ACommander.lnk

Create new registry entries:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ACommander
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ccagent.exe”

Screenshots:

How to remove the infection of ACommander (Adware.Win32.ACommander)?

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.

Tags: ,

Comments are closed.