Skip to main content
Microsoft Security Intelligence
Published Jun 02, 2006 | Updated Jul 11, 2017


Detected by Microsoft Defender Antivirus

Aliases: No associated aliases


Windows Defender detects and removes this threat.

Win32/Chir is a family of malware. It has both worm and virus components. The worm component spreads via email and spreads by exploiting the vulnerability resolved with the release of Microsoft Security Bulletin MS01-020. The virus component infects .EXE and .SCR files in local and remote drives. It's also been known to edit .HTM and .HTML files stored in your PC so that if these files are opened, the virus is run.

The following Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Follow us