W32 Chir Removal

W32 Chir, also known as Email-Worm.Chir, is a computer worm that spreads through malicious email attachments. Once it infects your computer, W32 Chir slows your computer and sends itself to your email contacts.

End Processes

• Press "Ctrl," "Shift," and "Esc" simultaneously to open the Task Manager. Right-click "runouce.exe" and select "End Process" from the menu that appears.

Delete Registry Values

• Click "Start," type "Regedit" into the search box and press "Enter" to open the Registry Editor. Right-click "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" in the left pane of the Registry Editor and select "Delete" from the menu that appears.

Delete Files

• Click "Start" and then search for and delete each of the following files by right-clicking on the file and selecting "Delete" from the menu that appears.

  c:\readme.eml

  ProgramFiles\NetMeeting\readme.eml

  ProgramFiles\Common Files\System\ado\readme.eml

  readme.eml

  c:\Inetpub\wwwroot\readme.eml

  System\runouce.exe