Published Aug 06, 2012|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: CXmal/RnsmLnk-A (Sophos) Trojan.LNK.Reveton (Ikarus)

Windows Defender Antivirus detects and removes this threat. 

The threat is a detection for shortcut files (LNK) created by variants of the Ransom:Win32/Reveton family of ransomware, which lock your computer and demand you pay a fine.

It's likely your PC has also been infected with other malware from the Ransom:Win32/Reveton family.

Our ransomware FAQ page has more information on this type of threat.

Read our latest comprehensive ransomware report:

Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene


Latest news