Trojan:Win32/Oficla.E Description

Trojan:Win32/Oficla.E is a security risk that attempts to download dangerous files from a remote location. Trojan:Win32/Oficla.E may give a remote attacker access and control of a compromised PC, also allowing the attacker to download more malware onto the system. Trojan:Win32/Oficla.E may also inject malicious code into a running process in order to download a fake anti-spyware program. Trojan:Win32/Oficla.E should be automatically removed with a legitimate security tool to ensure its complete eradication.

Type: Trojans

How Can You Detect Trojan:Win32/Oficla.E?

Trojan:Win32/Oficla.E Technical Report

As new Trojan:Win32/Oficla.E details are reported by our customers and findings from our Threat Research Center, we will update this section.

Trojan:Win32/Oficla.E’s Country of Origin:

• Russian Federation

Trojan:Win32/Oficla.E has typically the following processes in memory:

• %Windir%\gkboiers.dll

Trojan:Win32/Oficla.E creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
• [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa]
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

Important Article Disclaimer