Threat Search: 

ThreatExpert's Statistics for PE_Chir.B-O [Trend Micro]:

PE_Chir.B-O [Trend Micro] is also known as:
Threat AliasNumber of Incidents
W32/Chir.b@MM [McAfee]623
Email-Worm.Win32.Runouce.b [Kaspersky Lab]615
W32.Chir.B@mm [Symantec]612
JS.Chir.B [PC Tools]386
W32/Chir-B [Sophos]328
Virus:Win32/Chir.B@mm [Microsoft]317
I-Worm.Chir.B [PC Tools]195
Email-Worm.Win32.Runouce.B [Ikarus]128
Win32/ChiHack.worm.10748 [AhnLab]105
Email-Worm.Win32.Runouce [Ikarus]79
Email-Worm.Runouce!sd5 [PC Tools]20
Email-Worm.Runonce!ct [PC Tools]8

PE_Chir.B-O [Trend Micro] is known to be created as:
%System%\runouce.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).