Backdoor.Bifrose.AHY Description

Backdoor.Bifrose.AHY is a backdoor Trojan that downloads unsolicited files onto a compromised PC. Backdoor.Bifrose.AHY may enter a system through the exploitation of security flaws, without the consent or knowledge of the user. To ensure that it is executed with every system start-up, Backdoor.Bifrose.AHY creates a start-up registry entry. Backdoor.Bifrose.AHY can download dangerous malware onto a system and put a victim’s private information at risk of being stolen.

Type: Backdoors

Aliases: Mal/EncPk-CI (Sophos), Backdoor:Win32/Poison.M (Microsoft), Win-Trojan/Poison.8192.I (AhnLab).

How Can You Detect Backdoor.Bifrose.AHY?

Backdoor.Bifrose.AHY Technical Report

As new Backdoor.Bifrose.AHY details are reported by our customers and findings from our Threat Research Center, we will update this section.

Backdoor.Bifrose.AHY’s Country of Origin:

• Sweden

Backdoor.Bifrose.AHY Removal Details

Backdoor.Bifrose.AHY creates the following files in the system:

• %AppData%\addon.dat
• %ProgramFiles%\pic\picture.jpg

Backdoor.Bifrose.AHY creates the following registry entries:

• [HKEY_CURRENT_USER\Software\%UserName%914\-72398023]
• [HKEY_CURRENT_USER\Software\%UserName%914]

Important Article Disclaimer