Mobler is a worm that spreads through unprotected network shares and removable media such as floppy disks or USB drives. Once executed, the parasite secretly installs itself to the system, runs a spreading routine and a payload. Mobler disables some system controls and prevents essential system tools (Task Manager, Registry Editor, System Configuration Utility) from running. It may also perform a Denial of Service (DoS) attack against a predetermined web site. The worm runs on every Windows startup. It is also executed whenever the user opens files of certain types or tries to launch some system tools.