Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\BugReport] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\BugReport] 'ImagePath' = '%ProgramFiles%\Thunder Network\WebThunder\ThunderLoader\BugReport.exe'
- %WINDIR%\xunlei2.exe
- %WINDIR%\ubs.vbs
- %WINDIR%\1.bat
- %WINDIR%\.vbs
- %ProgramFiles%\Thunder Network\WebThunder\ThunderLoader\WebThunder.exe
- %ProgramFiles%\Thunder Network\WebThunder\ThunderLoader\BugReport.exe
- <SYSTEM32>\xfsvc.ocx
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- '%WINDIR%\xunlei2.exe'
- '<SYSTEM32>\wscript.exe' "%WINDIR%\ubs.vbs"
- '<SYSTEM32>\wscript.exe' "%WINDIR%\.vbs"
- '%ProgramFiles%\Thunder Network\WebThunder\ThunderLoader\BugReport.exe' -i
- '<SYSTEM32>\cmd.exe' /C 1.bat
- '<SYSTEM32>\regsvr32.exe' /s "<SYSTEM32>\xfsvc.ocx"
- '<SYSTEM32>\net.exe' start BugReport
- '<SYSTEM32>\net1.exe' start BugReport