Archive for the 'Shell' Category

SbCtri.exe is a component of Win32/IRCBot.GF worm

Friday, February 27th, 2009

This is an harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: SbCtri
Filename: SbCtri.exe
Registry key:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = “Explorer.exe %System%\drivers\SbCtri.exe”

Command: %WinDir%\System32\drivers\SbCtri.exe
Startup Type: Winlogon->Shell
Description: Win32/IRCBot.GF

How to remove: Use Spyware removal forum.