Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{930C0CC0-6456-40FC-1151-679EF960D81C}] 'stubpath' = '%CommonProgramFiles%\Apple\Mobile Device Support\apple.exe'
- %CommonProgramFiles%\apple\mobile device support\apple.exe
- C:\1.bat
- DNS ASK i.##hu.com
- DNS ASK bl##.daum.net
- DNS ASK hi.##idu.com
- DNS ASK in##060.com
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{930C0CC0-6456-40FC-1151-679EF960D81C}" /f' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c c:\1.bat' (with hidden window)
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{930C0CC0-6456-40FC-1151-679EF960D81C}" /f
- '<SYSTEM32>\cmd.exe' /c c:\1.bat