Troj/Bifrose-DE is a Trojan for the Windows platform.
When first run Troj/Bifrose-DE copies itself to <System>\Explorer.exe and creates the following files:
<Temp>\pct.dll
<System>\12344.dat
The file pct.dll is detected as Troj/Hackvan-E.
The following registry entries are created to run Troj/Bifrose-DE on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
456655
<System>\Explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
456655
<System>\Explorer.exe
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\(9B71D88C-C598-4935-C5D1-43AA4DB90836)
stubpath
<System>\Explorer.exe s
Registry entries are created under:
HKCU\Software\Wget\