Troj/Bifrose-WO is a Trojan for the Windows platform.
When first run Troj/Bifrose-WO copies itself to <Program Files>\Bifrost\server.exe.
The following registry entry is created to run server.exe on startup:
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B71D88C-C598-4935-C5D1-43AA4DB90836}
stubpath
<Program Files>\Bifrost\server.exe s
Registry entries are created under:
HKCU\Software\Bifrost