Home Malware Programs Rogue Anti-Spyware Programs C Components

C Components

Posted: April 13, 2010

C Components (or CComponents) is a clone of Control Components rogue anti-spyware program. C Components spreads after a Trojan infiltrates the targeted computer via a backdoor in the system. The Trojan stealthily downloads and installs corrupt data related to the C Components scam. The user will soon be redirected to a fake scan page which produces false results claiming the PC is infected with malware. This is a blatant scam to urge unwary users to purchase a copy of CComponents. Do not become another victim of cybercrime and have all threats related to C Components removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Application Data\CComponents\ccagent.exe
    2 %Documents and Settings%\[UserName]\Application Data\CComponents\ccmain.exe
    3 %Documents and Settings%\[UserName]\Application Data\CComponents\faq\guide.html
    4 %Documents and Settings%\[UserName]\Application Data\CComponents\settings.ini
    5 %Documents and Settings%\[UserName]\Application Data\CComponents\uninstall.exe
    6 %Documents and Settings%\[UserName]\Application Data\faq\images\05.png
    7 %Documents and Settings%\[UserName]\Application Data\faq\images\06.png
    8 %Documents and Settings%\[UserName]\Application Data\faq\images\07.png
    9 %Documents and Settings%\[UserName]\Application Data\faq\images\08.png
    10 %Documents and Settings%\[UserName]\Application Data\faq\images\09.png
    11 %Documents and Settings%\[UserName]\Application Data\faq\images\10.png
    12 %Documents and Settings%\[UserName]\Desktop\CComponents.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "ccmain.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ccagent.exe"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}CComponents
Loading...