Categories: Malware

What is “Win32/Bifrose.NEL”?

The Win32/Bifrose.NEL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Bifrose.NEL virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Expresses interest in specific running processes
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Bifrose.NEL?


File Info:
crc32: 1D8D2990md5: 6021e09784d4b8ca5450fe6010c6e543name: 6021E09784D4B8CA5450FE6010C6E543.mlwsha1: 381d3e29e265034e052451691a2990d8501dfa27sha256: 3f67801d69dfd76bf2ecf24de6f0047e94350a1b8c47783702417e3555bac40fsha512: cdf7c7c8b40ffd9cf38d94cd26263d340002210bde1f43c894c9185decaa9f7224325f4911502460fc7c5b5f5b9aa745c50f22e493d7015405edea1641785725ssdeep: 768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQflCHCMhEIV9sQwNQwuLkPTFz7wa3:kZ/nEkh8OTKNRHCML7iQHLkbFzW7Atype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Bifrose.NEL also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.40578665
FireEye	Generic.mg.6021e09784d4b8ca
CAT-QuickHeal	Backdoor.Bifrose.AE
Qihoo-360	Win32/Backdoor.0ab
McAfee	BackDoor-CEP.gen.g
Cylance	Unsafe
VIPRE	Backdoor.Win32.Bifrose.ae (v)
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Backdoor ( 0040f49a1 )
BitDefender	Trojan.GenericKD.40578665
K7GW	Backdoor ( 0040f49a1 )
Cybereason	malicious.784d4b
Baidu	Win32.Backdoor.Bifrose.a
Cyren	W32/Backdoor.XKFY-2198
Symantec	Backdoor.Trojan
TotalDefense	Win32/Backdrop.D
APEX	Malicious
Avast	Win32:BackDoor-ZR [Trj]
ClamAV	Win.Trojan.Bifrose-28231
Kaspersky	Backdoor.Win32.Bifrose.fxv
Alibaba	Backdoor:Win32/Bifrose.db9d49a8
NANO-Antivirus	Trojan.Win32.Bifrose.enscfe
ViRobot	Backdoor.Win32.A.Bifrose.32637.KZ
Rising	Trojan.Win32.Midgare.hhn (CLASSIC)
Ad-Aware	Trojan.GenericKD.40578665
Emsisoft	Trojan.GenericKD.40578665 (B)
Comodo	Backdoor.Win32.Bifrost.~Q@7opw
F-Secure	Backdoor:W32/Bifrose.gen!E
DrWeb	Trojan.Inject2.26734
Zillya	Virus.Bitforse.Win32.1
TrendMicro	BKDR_BIFROSE.SMA
McAfee-GW-Edition	BehavesLike.Win32.Generic.qc
Sophos	Mal/Generic-R + Mal/Bifrose-X
Ikarus	Backdoor.Win32.Bifrose
Jiangmin	Backdoor/Bifrose.fzf
Webroot	W32.Trojan.Bifrose
Avira	BDS/Bifrose.aec
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Bifrose.gic
Microsoft	Backdoor:Win32/Bifrose.AE
Gridinsoft	Trojan.Win32.Downloader.oa!s1
Arcabit	Trojan.Generic.D26B2E69
SUPERAntiSpyware	Trojan.Agent/Gen-FraudAlert
ZoneAlarm	Backdoor.Win32.Bifrose.fxv
GData	Trojan.GenericKD.40578665
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Bifrose.Gen
Acronis	suspicious
VBA32	SScope.Trojan.Buzus.ak
ALYac	Trojan.GenericKD.40578665
TACHYON	Backdoor/W32.Bifrose.57953
Malwarebytes	Generic.Trojan.Dropper.DDS
Panda	Bck/Bifrose.BFX
Zoner	Trojan.Win32.36495
ESET-NOD32	Win32/Bifrose.NEL
TrendMicro-HouseCall	BKDR_BIFROSE.SMA
Tencent	Trojan.Win32.Refroso.dejg
Yandex	Trojan.GenAsa!4E42FGF2k2Y
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Bifrose.NTA2!tr
BitDefenderTheta	AI:Packer.EC6D84F31D
AVG	Win32:BackDoor-ZR [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Backdoor.W32.Refroso.djjg