Backdoor

Backdoor:Win32/Bifrose!pz removal guide

Malware Removal

The Backdoor:Win32/Bifrose!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Bifrose!pz virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Backdoor:Win32/Bifrose!pz?


File Info:

name: 3D4ED013F2BBFF1BDACD.mlw
path: /opt/CAPEv2/storage/binaries/78fe808477447fefd807d57de1608fb854f2ae3dbdabcd2033b74c2f04f59c5e
crc32: 133DC051
md5: 3d4ed013f2bbff1bdacd5782106ab870
sha1: 77d0fffbea9174000c0be50757711cfce81b3782
sha256: 78fe808477447fefd807d57de1608fb854f2ae3dbdabcd2033b74c2f04f59c5e
sha512: bf81af451e290a9ce3af2bcf9c956e23a43a10381be4f3c39e750a8e3b01ab01abf8473dce7839f895a55959c92c91385211b958edba3bca261760546369d449
ssdeep: 3072:zGu99lfzqIbXWZkkTuBRm6Y2vYkkTuBRm6:z/cu0TcRm6YVTcRm6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AFC3AE11F2D4D27DD0E031715AAD33311AACEC706B75A3CBCA45A5EAA9787C09A3C35A
sha3_384: 40e00d65ad55faa9df2e87e6b20d4c8a55147c61c87d9de522c942fd834aca769e1095520970c19d39431fa1f8d5db5d
ep_bytes: e80a000000e97affffffcccccccccc8b
timestamp: 2008-04-13 18:32:45

Version Info:

0: [No Data]

Backdoor:Win32/Bifrose!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.ld1i
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Dropper.SAG
FireEyeGeneric.mg.3d4ed013f2bbff1b
MalwarebytesGeneric.Malware/Suspicious
SangforBackdoor.Win32.Bifrose.V1si
AlibabaBackdoor:Win32/Bifrose.8647706a
CrowdStrikewin/malicious_confidence_90% (W)
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Bifrose.NTA
APEXMalicious
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Bifrose.fsi
BitDefenderTrojan.Dropper.SAG
NANO-AntivirusTrojan.Win32.Bifrose.bjyor
AvastWin32:BackDoor-ZR [Trj]
EmsisoftTrojan.Dropper.SAG (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.DownLoader8.45140
VIPRETrojan.Dropper.SAG
TrendMicroTROJ_GEN.R03BC0DC224
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusBackdoor.Win32.Bifrose
GDataTrojan.Dropper.SAG
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.ModCab
Kingsoftmalware.kb.a.1000
ArcabitTrojan.Dropper.SAG
ViRobotTrojan.Win.Z.Bifrose.126976
ZoneAlarmBackdoor.Win32.Bifrose.fsi
MicrosoftBackdoor:Win32/Bifrose!pz
AhnLab-V3Backdoor/Win.Bifrose.C5595724
VBA32Backdoor.PoisonIvy
ALYacTrojan.Dropper.SAG
MAXmalware (ai score=88)
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R03BC0DC224
RisingTrojan.Generic@AI.90 (RDML:23J3tlpOnBYrx6mFHqdYgQ)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/ModCab.A!tr
AVGWin32:BackDoor-ZR [Trj]
DeepInstinctMALICIOUS

How to remove Backdoor:Win32/Bifrose!pz?

Backdoor:Win32/Bifrose!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment