Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Thunder5.exe] 'Debugger' = 'svchost.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVP.EXE] 'Debugger' = 'svchost.exe'
- <SYSTEM32>\rundll32.exe %WINDIR%\jiocs.dll MyEntryPoint
- 360tray.exe
- AVP.EXE
- %WINDIR%\jiocs.dll
- <DRIVERS>\kjkiuiuo.sys
- <DRIVERS>\kjkiuiuo.sys