Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\mshelpsrvsv] 'Start' = '00000002'
- '%CommonProgramFiles%\Microsoft Shared\Windows Update\helpservice.exe'
- '%TEMP%\1058.exe'
- %CommonProgramFiles%\Microsoft Shared\Windows Update\helpservice.exe
- %TEMP%\1058.exe
- %APPDATA%\Project.docx
- 'he##.###look-microsoft.net':80
- he##.###look-microsoft.net/outlook/cr/index.php
- DNS ASK he##.###look-microsoft.net