Bifrost 1.1.01
(Backdoor.Win32.Bifrose.f for Client)
(Backdoor.Win32.Bifrose.agq for Server)
(Backdoor.Win32.Bifrose.uw for packed Server)

by ksv

Written in Microsoft Visual C++

Released in December 2004

more versions


Bifrost fwb+ v1.1 by ksv
-----------------------------------------

Disclaimer
----------
Bifrost must only be used on your own computers or on computers where the owner has expressly given his/her approval. 
Neither EES or the creator(s) of Bifrost will in no way be held responsible for any damages caused by the negligent use of this software.


Description
-----------
Bifrost fwb+ is an advanced Remote Administration Tool that allows you to remotely control computers that are behind firewalls and routers.
That includes software firewalls that usually detects when a dll is injected. The server size is only 20 kb when packed.
Features:
Cam Capture, File Manager, File Search, Offline/Online Keylogger, Password List (protected storage, cached passwords, icq, cd keys),
Polymorphic Plugin, Process List, Remote Shell, Screen Capture, System Info and Windows List.


Getting Started
---------------
The main idea is to create a server without the plugin, in order to make it small (20 kb).
Without the plugin, Bifrost will have the basic functions:
File Manager
File Search
Process List
Screen Capture with basic compression
System Info
Windows List.

If you then chose to upload the plugin, the following functions will also be available:
Cam Capture
Offline/Online Keylogger
Password List (protected storage, cached passwords, icq, cd keys)
Screen Capture with better compression
Screen Capture with jpg option
Remote Shell

You can see if the plugin has been uploaded by looking in the "P" column in the main window.
The "C" column will tell you if there is a webcam installed in the remote computer.

Added:
An icon has been added to the unpacked server

Bugfixes: 
* Screen caps using 100% jpg being sent and saved as bmp
* Context menu sometimes becoming distorted in all windows
* Buttons in cam window getting messed up when the resolution is low
* Webcam not working on Windows 98

ksv


Server:
dropped files:
c:\WINDOWS\system32\plugin1.dat   size: 51.733 bytes 
c:\WINDOWS\system32\server.exe    size: 72.380 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "startkey"
data: C:\WINDOWS\System32\server.exe 

tested on Windows XP
December 09, 2004

MegaSecurity