bifrost server.exe infection

several machines running SAV 10 CE are getting hit with the bifrost package. Yes, it is spelled correct and it does act a lot like bifrose. It deposits server.exe inside of windows\system32\bifrost. It chats up your network and tries to head out with information.
SAV does not recognize it. I checked all of the patches and updates, nothing is working. Any clues?
Mesa, Az

Loren McGrew wrote:

several machines running SAV 10 CE are getting hit with the bifrost package. Yes, it is spelled correct and it does act a lot like bifrose. It deposits server.exe inside of windows\system32\bifrost. It chats up your network and tries to head out with information.
SAV does not recognize it. I checked all of the patches and updates, nothing is working. Any clues?
Mesa, Az

No Clue but you DO want to get rid of it (if you haven't already) It seems to stop Task Manager from actually allowing you to set it to update (stays perpetually at PAUSED) and in my case came with other virii and made a mess of a machine rebuild I did (from XP to Vista... Ugh) I almost had to redo it all but was able to brute force install Virus SW AND use of Windows Defender found these running ALWAYS. Disabled them, Deleted them and then rebooted (Also found system32/hal.exe ...)

Cerb

With this program you can make a undetectable server bifrost 100 %

This is the link :

http://shup.com/Shup/99235/U.EXE

Read the "read me" before use.

I like to know the person who creates bifrost,I have to whisper something in his or her ears!!!!

Costs me a whole day to remove his shit from my pc, so.. anybody knows who programmed bifrost? TELL ME

I found the bifrost thing by looking in startup and running services if you go to the start menu then run and type in msconfig.exe. I also noticed readyboost running in services even though it was disabled!!
also the arccon.ac was running with a direct connection to arccon (I have some of their software but never had this run before) even though I hadn't installed anything whatsoever in months I just ran a windows update yesterday. SO it must have been in the update!! That could possibly mean Microsoft is putting crap in the updates to spy on people for other software manufacturers... I was able to stop the start up of arccon by going to the list of start up programs in msconfig and unchecking it then also disabling the service in memory and if you go to the msconfig it shows you where the program is on the computer I deleted the folder and also it shows you the registry location well it wasn't accurate but I found it and deleted it Arc connection. People should possibly boycott Arc Soft for this creepy spy program.

hi everyone! I know how to deal with bifrost, i learnt that from some vedios on youtube! but i don't know how to create a servere that i will send to my victim!!
please if someone can help i would appreciate it!

thankx

kos 5awatko ya 5wan shrmota

http://stashbox.org/manage_file/881022/counte...