Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe rundll32.exe "%TEMP%\ocfd.qeo" asfmtyb'
- <SYSTEM32>\svchost.exe
- %TEMP%\ocfd.qeo
The page may not load correctly.
Added to the Dr.Web virus database: 2012-05-09
Virus description added: 2012-05-30
Download by serial number
Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.
After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.
Download by serial number
Doctor Web is a cybersecurity company focused on threat detection, prevention and response technologies