Worm.Colowned.A

Worm.Colowned.A was first released on 8 February, 2011, and has since become synonymous sneaky and deceitful actions which help other malware enter the system more easily. This backdoor Trojan provides remote access to the infected system to faceless hackers with dubious intentions.

Users infected with Worm.Colowned.A have reported their systems being used in various nefarious campaigns without their knowledge, most frequently as part of a Denial of Service attack (DDoS attack). It also installs a downloader or dropper Trojan to the system, which has the potential to install a proxy Trojan which is used to relay spam or keylogger Trojans to the system. These threats monitor and send keystrokes to remote hackers. This puts the user at risk of further criminalization in the form of financial and identity fraud.

Worm.Colowned.A enters the system clandestinely, and will not reveal itself to the user at any time. The user will in fact remain completely in the dark as to the presence of Worm.Colowned.A on the system, and will only be alerted to its presence by the security software on the PC picking it up.

Finding the following files and processes running on the system will be a clear indication of a Worm.Colowned.A infection:

BM86c_289.exe
crtlib.exe
spuninst.exe
svchost.exe
taskhost.exe

In order to protect your PC against the malicious intentions of this backdoor Trojan, destroy Worm.Colowned.A to limit the damage it will cause. Use the removal power of a genuine security tool to ensure you are able to permanently erase Worm.Colowned.A from the system.