Latest update of threat Krowi was found in Adobe Photoshop cracker installer.
Not much difference with “iWorkServices” except with the repackaging and name. However, this should serve as a reminder to be extra careful in downloading stuff!
Once installed, you’ll find these files and port activity below.
How to Remove? It’s the same as the previous instruction except that you have to change the name from “iWorkServices” to “DivX”.