W32.Morto.B

W32.Morto.B is a worm that proliferates through removable drives and by using Remote Desktop Protocol (RDP) connections. W32.Morto.B attempts to open the Remote Desktop Protocol (RDP) connection on computer systems in the local network by using common user name and password combinations. W32.Morto.B also corrupts executable files detected on the affected PC. When activated, W32.Morto.B inserts itself into the svchost.exe service. W32.Morto.B may also corrupt other executable files on the infected computer system. W32.Morto.B then replicates itself to the specific location. W32.Morto.B corrupts the certain file by adding itself into the last section of the file. W32.Morto.B creates numerous registry entries to register itself as a system service and store data and its copy. W32.Morto.B then modifies several registry entries to disable specific system settings. W32.Morto.B also modifies the specific registry entries to disable security applications.