Backdoor.Bifrose.F

The Blizzard Launcher has detected the Backdoor.Bifrose.F Trojan on your machine which may be used to steal your World of Warcraft account name and password.


Trojans are a %26#8220;back door%26#8221; in to your machine which can allow hackers to obtain sensitive data as well as cause harm to your machine. Trojans differ from Viruses as Viruses replicate themselves and are designed to purely cause damage to the %26#8220;host%26#8221; machine. Each Trojan functions differently, however most are designed to obtain information through use of keyloggers or allow remote functions for the hacker to literally use your computer. Trojans pose a serious threat to all computer users and it is extremely important that they are removed immediately before information can be gathered. Some Trojans are also used to allow further infection, installing additional Trojan functions as well as Viruses.


Follow these steps to remove the Trojan and protect yourself from future infection:


1. Close the Blizzard Launcher. You are still allowed to log in and play, however playing the game with a Trojan installed puts your account at serious risk of being compromised as the hacker can easily obtain your World of Warcraft account name and password.

2. Ensure that all programs are closed. If you have recently downloaded any executable (.exe) files meant for use with the game, delete them so that they are not accidentally used in the future.

3. Use one or more of the below programs to help remove the Trojan and provide future protection against them. After installing the program, ensure that you update its %26#8220;definitions%26#8221;. Definitions are used as a dictionary of sorts for the program to help it detect new Trojans. This is usually prompted to be done shortly after install by the program itself. If not, the process to do so should be available within the program options.

4. Make sure you run a thorough scan of your entire system. After removing the Trojan, use the Blizzard Launcher again to start the game and see if any additional threats are detected.


Removal Programs


The below programs can all be used to detect and remove the Trojan found on your system. Programs with trial or free versions are marked as such. Trial programs are basic versions of the program that can be used for a limited amount of time, after which you can either choose to purchase the full product or uninstall the program.


The %26#8220;Version used%26#8221; field notates what version of that program was used by Blizzard to confirm its ability to find this specific Trojan. The version you download should be the newest available and does not necessarily have to match the one listed.









AntiVir (Free)

Version Used: 7.4.0.15

Detetcs As: BDS/Bifrose.F.20


AVG (Free)

Version Used: 7.5.0.464

Detects As: BackDoor.Generic4.WGX



BitDefender (Trial)

Version Used: 7.2

Detects As: Backdoor.Bifrose.F


ClamAV (Free)

Version Used: devel-20070416

Detects As: Trojan.Packed


Fortinet (Free)

Version Used: 2.85.0.0

Detects As: BDoor.CEP!tr.bdr


F-Secure (Trial)

Version Used: 6.70.13030.0

Detects As: W32/Smalldoor.ABNT


Ikarus (Trial)

Version Used: T3.1.1.5

Detects As: Backdoor.VB.EV


McAfee (Trial)

Version Used: 5019

Detects As: BackDoor-CEP.svr


Norman (Trial)

Version Used: 5.80.02

Detects As: W32/Smalldoor.ABNT


Sunbelt (Trial)

Version Used: 2.2.907.0

Detects As: Backdoor.Bifrose.F


If your account has already been compromised please make sure the Trojan is removed by following the steps above. After the Trojan has been successfully removed follow the steps below for help with recovery.


* If your account has been compromised and you are unable to login please attempt to recover your password by clicking here.

* If you are unable to recover your account password or are having difficulty with the hacker changing it again after recovery; please first make sure the Trojan is fully removed by following the steps at the top of this page as well as running a thorough system scan. If the Trojan has been removed please contact our Billing %26amp; Account department by phone.

* If you have successfully recovered the account and the hacker has not been able to login but you are missing items or characters; please contact our In-Game Support department by creating an in-game petition.


Source: Blizzard