Join us in Wellington 4th December and Auckland 27th November
Want to help us test an ads-free Geekzone? Register for webpass now

Geekzone: technology news, blogs, forums
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
First backdoor trojan found for Windows Mobile Pocket PC
Posted on 6-Aug-2004 14:17. | Tags Filed under: News.

First backdoor trojan found for Windows Mobile Pocket PC
Not long after the first proof-of-concept Pocket PC virus was found, a real trojan program is being distributed, targeting this platform. Brador.a (or WinCE.Brador.a as defined by Symantec) is a backdoor (a utility allowing for remote administration of the infected machine) for Windows Mobile Pocket PC. It is written in ASM for ARM-processors and is 5632 bytes in size.

Brador is created to allow the master full control over the infected PDA via the port that the Trojan opens. Brador is programmed to upload and download files and execute a series of further commands. Like all backdoors, Brador cannot spread by itself: it can only arrive as an email attachment, be downloaded from the Internet or uploaded along with other data from a desktop.

After Brador is launched in creates an svchost.exe file in the /Windows/StartUp/ folder, thus gaining full control over the handheld every time it is restarted (soft reset). The program then identifies the IP address of the infected handheld and sends it to the virus coder to inform him that the handheld is connected to the Internet and that the backdoor is active. Brador then opens port 2989 and awaits further orders.

The backdoor responds to the following commands:

  • d - lists the directory contents
  • f - closes the session
  • g - uploads a file
  • m - displays MessageBox
  • p - downloads a file
  • r - executes a specified command

    Symantec reports this trojan here and Kasperski is reporting it here.

  • comments powered by Disqus

    Trending now »

    Hot discussions in our forums right now:

    A 17 second violation of airspace? Is Turkey nuts?
    Created by DaveB, last reply by xlinknz on 27-Nov-2015 16:32 (79 replies)
    Pages... 4 5 6

    Black Friday 2015 - Post Deals here
    Created by Finch, last reply by joker97 on 28-Nov-2015 15:30 (71 replies)
    Pages... 3 4 5

    Ford Eco Sport Titanium-Looking to buy
    Created by psychrn, last reply by gzt on 28-Nov-2015 14:08 (37 replies)
    Pages... 2 3

    Reliable hatchback for $6k?
    Created by TeaLeaf, last reply by Fred99 on 29-Nov-2015 17:48 (34 replies)
    Pages... 2 3

    Huawei and 2degrees Nexus 6P 64/128 GB offer for Geekzone users
    Created by freitasm, last reply by droopanu on 27-Nov-2015 15:58 (679 replies)
    Pages... 44 45 46

    Wireless broadband in Wellington?
    Created by zhzh, last reply by zhzh on 28-Nov-2015 20:08 (16 replies)
    Pages... 2

    When should you put up your Xmas tree?
    Created by Finch, last reply by mercutio on 30-Nov-2015 00:14 (31 replies)
    Pages... 2 3

    How to collect from a debtor - any ideas?
    Created by jmh, last reply by jmh on 29-Nov-2015 13:46 (31 replies)
    Pages... 2 3