Backdoor:Win32/Bifrose.FO removal instruction

The Backdoor:Win32/Bifrose.FO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Bifrose.FO virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Backdoor:Win32/Bifrose.FO?

File Info:
name: E55A03352463F36BBC37.mlw
path: /opt/CAPEv2/storage/binaries/cecd881209c9b890e96001ed1d07d98841a1b4d6d7213128430952be7021429e
crc32: 33D3A94B
md5: e55a03352463f36bbc37d8c5768a609e
sha1: 2542e24a320fa39d14fbe603bb931efda80ab792
sha256: cecd881209c9b890e96001ed1d07d98841a1b4d6d7213128430952be7021429e
sha512: bcbd0d71d6f3f511eba273780d784e366a4313e8fdfc1b591a69f1b4c2d8e965e2f4e2e3cabbab0a6308b654326a092a67c775e2439934f654195c7803aeae16
ssdeep: 12288:q6sqW6AJysrpup9ow2Rlx83jMjiay9oSRG9/OnKRj+f8HXXJ0ZjK260TUMJL8tsp:q6sqrAkGurYqYjiZKFo0JvoTVL8tIM0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C51533349EBC04BDC8689FBA1D8750E08EF23A6B5931513133556C66AB33B33689E771
sha3_384: 9742f0f0db12d9b16365fdddc4db99c7a265386c61a7544ac219ec9b36c20521e13cdbc062a31c9ca947ac3095288d2e
ep_bytes: b800000000600bc07468e80000000058
timestamp: 2007-01-17 22:19:02

Version Info:
0: [No Data]

Backdoor:Win32/Bifrose.FO also known as:

How to remove Backdoor:Win32/Bifrose.FO?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.