Note: Detection for files reported as Trojan:Win32/Provis!rts have been added to our signatures after specific malicious behaviors were observed during advanced automated analysis. If you believe that this file has been reported in error, we encourage you to submit the affected file to us for further analysis. Be sure to indicate that this may be an incorrect detection by checking the checkbox and adding a note to the comments field of the submission form.
Threat behavior
Trojan:Win32/Provis!rts is a name used for trojan detections that have been added to Microsoft signatures after advanced automated analysis.