W32_Mobler_B details

  • Description

    W32.Mobler.B is a worm that copies itself to local drives and disables the Registry Editor on the compromised computer.

  • Registry

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer