Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
First backdoor trojan found for Windows Mobile Pocket PC
Posted on 6-Aug-2004 14:17. | Tags Filed under: News.


First backdoor trojan found for Windows Mobile Pocket PC
Not long after the first proof-of-concept Pocket PC virus was found, a real trojan program is being distributed, targeting this platform. Brador.a (or WinCE.Brador.a as defined by Symantec) is a backdoor (a utility allowing for remote administration of the infected machine) for Windows Mobile Pocket PC. It is written in ASM for ARM-processors and is 5632 bytes in size.

Brador is created to allow the master full control over the infected PDA via the port that the Trojan opens. Brador is programmed to upload and download files and execute a series of further commands. Like all backdoors, Brador cannot spread by itself: it can only arrive as an email attachment, be downloaded from the Internet or uploaded along with other data from a desktop.

After Brador is launched in creates an svchost.exe file in the /Windows/StartUp/ folder, thus gaining full control over the handheld every time it is restarted (soft reset). The program then identifies the IP address of the infected handheld and sends it to the virus coder to inform him that the handheld is connected to the Internet and that the backdoor is active. Brador then opens port 2989 and awaits further orders.

The backdoor responds to the following commands:

  • d - lists the directory contents
  • f - closes the session
  • g - uploads a file
  • m - displays MessageBox
  • p - downloads a file
  • r - executes a specified command

    Symantec reports this trojan here and Kasperski is reporting it here.






  • comments powered by Disqus




    Trending now »

    Hot discussions in our forums right now:

    Good riddance to Obama and his drones. Pakistani villagers will be saying the same.
    Created by amiga500, last reply by Pumpedd on 22-Jan-2017 20:14 (107 replies)
    Pages... 6 7 8


    The President Of The USA: Donald Trump
    Created by TimA, last reply by mattwnz on 22-Jan-2017 21:07 (1864 replies)
    Pages... 123 124 125


    $1160 for a car battery??!!
    Created by jonathan18, last reply by alasta on 22-Jan-2017 17:20 (62 replies)
    Pages... 3 4 5


    Xtra email no longer receives on Outlook 2003 / Outlook 2011 for MAC
    Created by lNomNoml, last reply by hio77 on 22-Jan-2017 13:40 (45 replies)
    Pages... 2 3


    New Ford Mustang or Holden Commodore or alternatives
    Created by MikeB4, last reply by driller2000 on 21-Jan-2017 12:39 (63 replies)
    Pages... 3 4 5


    Headphones recommendations?
    Created by rayonline, last reply by timmmay on 22-Jan-2017 20:52 (13 replies)

    Spec check on laptop for GoPro editing please
    Created by martyyn, last reply by richms on 20-Jan-2017 17:23 (13 replies)

    New Unlimited Fixed Broadband
    Created by LivingSkinny, last reply by noroad on 19-Jan-2017 11:14 (55 replies)
    Pages... 2 3 4