Welcome to the Virus Encyclopedia of Panda Security.
It opens several ports and connects to an IRC channel, in order to allow hackers to gain remote control over the affected computer.>
|First detected on:||June 24, 2004|
|Detection updated on:||March 14, 2005|
|Yes, using TruPrevent Technologies
HackArmy.R is a backdoor that opens several ports in the affected computer, so hackers can carry out actions that could compromise user confidentiality or impede normal work. In order to do so, HackArmy.R connects to an IRC channel.
HackArmy.R has been massively sent via e-mail (spam), in a message that contains a link to an specific website. The message contains a text that attempts to trick users into visiting the mentioned link and into downloading a file. The message states that the link contains images of Osama bin Laden committing suicide.
HackArmy.R is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.
However, HackArmy.R has been massively sent via e-mail in a message with the following characteristics:
Osama Found Hanged
Osama Bin Ladin was found hanged by two CNN journalists early Wedensday
evening. As evidence they took several photos, some of which i have
included here. As yet, this information has not hit the headlines due to
Bush wanting confirmation of his identity but the journalists have released
some early photos over the internet.
The file downloaded from the link is compressed in a ZIP format and it contains an executable file named OSAMA DEAD.EXE.