Bifrost 1.0 (b) Server
(Backdoor.Win32.Bifrose.b)

by ksv

Written in Microsoft Visual C++

Released in July 2004

more versions




Server:
dropped file:
c:\WINDOWS\Server.exe
size: 24,743 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B71D88C-C598-4935-C5D1-43AA4DB90836} "stubpath"
data: C:\WINDOWS\Server.exe s 



tested on Windows XP
February 11, 2005

MegaSecurity