Win32/Oficla [Threat Name] go to Threat

Win32/Oficla.ID [Threat Variant Name]

Category trojan
Size 38400 B
Aliases Spam-Mailbot.ab.trojan (McAfee)
  TrojanDropper:Win32/Oficla.T (Microsoft)
  Trojan.Sasfis (Symantec)
  Win32:Oficla-AB (Avast)
  Crypt.AADA.trojan (AVG)
Short description

Win32/Oficla.ID is a trojan that installs Win32/Oficla.HE malware.


The trojan creates the following file:

  • %temp%\­%variable%.tmp (20480 B, Win32/Oficla.HE)

A string with variable content is used instead of %variable% .

The file is then executed.

Other information

After the installation is complete, the trojan deletes the original executable file.

Please enable Javascript to ensure correct displaying of this content and refresh this page.