Mobler.b manual removal:
Kill processes:
host.exe, nia_ramadani.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run=%Windir%\host.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions=1
Delete files:host.exe, nia_ramadani.exe
Misc:Filenames may vary.
Exact file location:
host.exe - C:\Windows or C:\Winnt
nia_ramadani.exe - the root of local drives, network shares and removable media
Post Comment: