x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

HackArmy.R

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:HackArmy.R
Technical name:Bck/HackArmy.R
Threat level:Low
Type:Backdoor
Effects:  

It opens several ports and connects to an IRC channel, in order to allow hackers to gain remote control over the affected computer.

>
Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:June 24, 2004
Detection updated on:March 14, 2005
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

HackArmy.R is a backdoor that opens several ports in the affected computer, so hackers can carry out actions that could compromise user confidentiality or impede normal work. In order to do so, HackArmy.R connects to an IRC channel.

HackArmy.R has been massively sent via e-mail (spam), in a message that contains a link to an specific website. The message contains a text that attempts to trick users into visiting the mentioned link and into downloading a file. The message states that the link contains images of Osama bin Laden committing suicide.

Visible Symptoms 

    

HackArmy.R is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.

However, HackArmy.R has been massively sent via e-mail in a message with the following characteristics:

  • Subject:
    Osama Found Hanged
  • Message:
    Osama Bin Ladin was found hanged by two CNN journalists early Wedensday
    evening. As evidence they took several photos, some of which i have
    included here. As yet, this information has not hit the headlines due to
    Bush wanting confirmation of his identity but the journalists have released
    some early photos over the internet.
    http://www.theparadise.
    .net/OsamaFoundDead.zip

The file downloaded from the link is compressed in a ZIP format and it contains an executable file named OSAMA DEAD.EXE.