<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>HT Logs. Tips, FAQs, Analyze. &#187; Shell</title>
	<atom:link href="http://htlogs.com/category/startup-type/shell/feed/" rel="self" type="application/rss+xml" />
	<link>http://htlogs.com</link>
	<description>HIJACKTHIS ITEMS/REGISTRY ITEMS/HOW TO REMOVE</description>
	<lastBuildDate>Fri, 10 Sep 2010 15:36:32 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>SbCtri.exe is a component of Win32/IRCBot.GF worm</title>
		<link>http://htlogs.com/sbctriexe-is-a-component-of-win32ircbotgf-worm/</link>
		<comments>http://htlogs.com/sbctriexe-is-a-component-of-win32ircbotgf-worm/#comments</comments>
		<pubDate>Fri, 27 Feb 2009 15:08:39 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Shell]]></category>
		<category><![CDATA[Worm]]></category>

		<guid isPermaLink="false">http://htlogs.com/?p=219</guid>
		<description><![CDATA[This is an harmful program. It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum. Name: SbCtri Filename: SbCtri.exe Registry key: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = &#8220;Explorer.exe %System%\drivers\SbCtri.exe&#8221; Command: %WinDir%\System32\drivers\SbCtri.exe Startup Type: Winlogon->Shell [...]]]></description>
			<content:encoded><![CDATA[<h2>This is an harmful program.</h2>
<table cellpading=0 cellspacing=0 border=0>
<tr>
<td><img src="http://htlogs.com/wp-content/uploads/2009/01/remove-icon-80.jpg" alt="remove" title="remove-icon-80" width="80" height="79" class="size-full wp-image-16" /></td>
<td>It is a component of malware or spyware, you should immediately remove it using an <a href="http://www.myantispyware.com/free-programs/">antivirus</a> and <a href="http://www.myantispyware.com/free-programs/">antispyware</a> program.<br />
If that does not help, then ask us for help in the <a href="http://myantispyware.com/forum/spyware-removal-f4.html">Spyware removal forum</a>. </td>
</tr>
</table>
<p><strong>Name:</strong> SbCtri<br />
<strong>Filename:</strong> SbCtri.exe<br />
<strong>Registry key:</strong> </p>
<blockquote><p>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = &#8220;Explorer.exe %System%\drivers\SbCtri.exe&#8221;</p></blockquote>
<p><strong>Command:</strong> %WinDir%\System32\drivers\SbCtri.exe<br />
<strong>Startup Type:</strong> Winlogon->Shell<br />
<strong>Description:</strong> Win32/IRCBot.GF</p>
<p><strong>How to remove:</strong> Use <a href="http://myantispyware.com/forum/spyware-removal-f4.html">Spyware removal forum</a>. </p>
]]></content:encoded>
			<wfw:commentRss>http://htlogs.com/sbctriexe-is-a-component-of-win32ircbotgf-worm/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
