Backdoor.Bifrose Description

Backdoor.Bifrose (sometimes referred to as Bifrose) is a backdoor Trojan that provides an unauthorized user with remote access, and in some cases complete control, of your system. Thus Backdoor.Bifrose places any and all personal information data at great risk of being stolen, while other files may be uploaded, downloaded and deleted from your hard drive. Computer security and stability may be further degraded as Backdoor.Bifrose may download other malicious applications.

Type: Backdoors

How Can You Detect Backdoor.Bifrose?

Backdoor.Bifrose Technical Report

As new Backdoor.Bifrose details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Backdoor.Bifrose files with its MD5s were created in the system:

Backdoor.Bifrose has typically the following processes in memory:

• backdoor.bifrose.a.exe
• ~565.exe
• pxwma.dll
• xvid-1.0.3-beta3-setup.exe
• ap0.exe
• system.dll
• backdoor.bifrose.a_(319).exe
• ap2.exe
• msconf.exe
• ccdrive32.exe

Backdoor.Bifrose creates the following registry entries:

• HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runstartkey
• HKEY_LOCAL_MACHINE\software\xvid
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xvid

Important Article Disclaimer