Technical Information
- <Current directory>\everlook¼óëùæ÷.exe
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- '11#.#78.130.195':80
- http://11#.#78.130.195/Everlook.exe
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\tem.vbs"