Threat Search: 

ThreatExpert's Statistics for Win32/ChiHack.worm.10748 [AhnLab]:

Win32/ChiHack.worm.10748 [AhnLab] is also known as:
Threat AliasNumber of Incidents
Email-Worm.Win32.Runouce.b [Kaspersky Lab]107
W32/Chir.b@MM [McAfee]106
PE_Chir.B-O [Trend Micro]105
W32/Chir-B [Sophos]105
W32.Chir.B@mm [Symantec]98
Virus:Win32/Chir.B@mm [Microsoft]97
I-Worm.Chir.B [PC Tools]79
Email-Worm.Win32.Runouce [Ikarus]68
Email-Worm.Win32.Runouce.B [Ikarus]20
Email-Worm.Runouce!sd5 [PC Tools]8
Email-Worm.Runonce!ct [PC Tools]4
JS.Chir.B [PC Tools]4
W32.Virut.U [Symantec]2
W32/Vetor-A [Sophos]2
W32/Virut.gen [McAfee]2
Win32.Virut.Gen.5 [PC Tools]2
PE_CHIR.DAM [Trend Micro]1
PE_VIRUT.XO [Trend Micro]1
PE_VIRUT.XP [Trend Micro]1
Virus:Win32/Virut.AP [Microsoft]1
Virus:Win32/Virut.K [Microsoft]1

Win32/ChiHack.worm.10748 [AhnLab] is known to be created as:
%System%\runouce.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).