Loading ...
Español
Português|
|
Tweet |  More |
Email-Worm.Chir Description
Email-Worm.Chir is a malicious mass-mailing worm. On entering a system, Email-Worm.Chir will harvest e-mail addresses and send e-mails with attached copies of itself to all the found addresses. Email-Worm.Chir will also negatively affect the performance of an infected machine; therefore it is best to remove this worm from an infected machined immediately after detection.
Type: Worms
Aliases: Email-Worm.Win32.Runouce.b (Kaspersky Lab), W32/Chir.b@MM (McAfee), PE_Chir.B (Trend Micro), W32/Chir-B (Sophos), Virus:Win32/Chir.B@mm (Microsoft), Win32/ChiHack.6652 (AhnLab).
How Can You Detect Email-Worm.Chir?
Email-Worm.Chir Removal Details
Email-Worm.Chir has typically the following processes in memory:
- %System%\runouce.exe
Email-Worm.Chir creates the following files in the system:
- %ProgramFiles%\Common Files\System\ado\readme.eml
- [pathname with a string SHARE]\readme.eml
- c:\readme.eml
- c:\Inetpub\wwwroot\readme.eml
- %ProgramFiles%\NetMeeting\readme.eml
Email-Worm.Chir creates the following registry entries:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Important Article Disclaimer
This entry was last updated on 09/16/10 and posted on 09/16/10.
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
Email Worm.Chir
Leave a Comment
Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.