Win32/Oficla [Threat Name] go to Threat

Win32/Oficla.ID [Threat Variant Name]

Category trojan
Size 38400 B
Detection created Aug 24, 2010
Detection database version 5392
Aliases Spam-Mailbot.ab.trojan (McAfee)
  TrojanDropper:Win32/Oficla.T (Microsoft)
  Trojan.Sasfis (Symantec)
  Win32:Oficla-AB (Avast)
  Crypt.AADA.trojan (AVG)
Short description

Win32/Oficla.ID is a trojan that installs Win32/Oficla.HE malware.

Installation

The trojan creates the following file:

  • %temp%\­%variable%.tmp (20480 B, Win32/Oficla.HE)

A string with variable content is used instead of %variable% .


The file is then executed.

Other information

After the installation is complete, the trojan deletes the original executable file.

Please enable Javascript to ensure correct displaying of this content and refresh this page.