NarNar

 Virus Information - NarNar:

Narnar is a 32 bit Windows trojan. This trojan affects Windows 98 and NT systems. This can infect Windows 95 systems, if WS2_32.DLL file is present. This trojan mainly spreads through the Internet relay Chat (IRC). On execution of the infected file, it copies a file tskmngr.exe, in the \Windows\System directory under Windows 95/98 and in the \WinNT\System32 directory under Windows NT. Narnar makes necessary registry entry to activate the trojan at the next startup. It adds a Registry Key at :

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\

CurrentVersion\Run\

It tries to establish connection with irc.dal.net and several other FTP sites.