Remove Mobler.b. Description and removal instructions

Title: Mobler.b
Type: Worms	Severity scale: (47 / 100)

Mobler.b is a worm that spreads through local drives, network shares and removable media such as floppy disks or USB drives. Once executed, the parasite secretly installs itself to the system and runs a spreading routine. It copies itself to all available drives and also creates infected files in folders containing JPEG images. Then Mobler.b runs a payload. It disables the Registry Editor and changes some system settings. The worm runs on every Windows startup.

FORUM:
Discuss Mobler.b in
spyware removal forum

Related files: host.exe, nia_ramadani.exe

Mobler.b properties:
• Hides from the user
• Stays resident in background

Automatic Mobler.b removal:

remover for Mobler.b

Mobler.b manual removal:

Kill processes:
host.exe, nia_ramadani.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run=%Windir%\host.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions=1

HELP:
how to remove registry entries

Delete files:
host.exe, nia_ramadani.exe

HELP:
how to remove harmful files

Misc:
Filenames may vary.

Exact file location:
host.exe - C:\Windows or C:\Winnt
nia_ramadani.exe - the root of local drives, network shares and removable media

Other programs to remove Mobler.b:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 24/10/06
Information updated: 29/10/06

Additional resources related to Mobler.b:

Attention: If you know or you have a website or page about Mobler.b removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Mobler.b parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.