MSRT July 2015: Crowti

JMH · Jul 21, 2015

In our ongoing effort to provide malware protection, we are adding the following detections to the Microsoft Malicious Software Removal Tool (MSRT) this month:

Win32/Crowti

Win32/Reveton

Crowti, a file encryption threat, is one of the top prevalent ransomware families. We have recently seen it sent as a spam email attachment with formats similar to those shown below:

Figure 1: Email spam samples delivering Crowti as an attachment

http://blogs.technet.com/b/mmpc/archive/2015/07/14/msrt-july-2015-crowti.aspx

Search

Search

MSRT July 2015: Crowti

JMH

Emeritus, Contributor