Technical Information
- <SYSTEM32>\dmserver.dll with <SYSTEM32>\dmserver.dll
- <SYSTEM32>\dmserver.dll
- '<SYSTEM32>\cmd.exe' /c %TEMP%\fw4xMz.bat
- %TEMP%\fw4xMz.bat
- <SYSTEM32>\mssockoh.dll
- <SYSTEM32>\gdimnt.dll
- from <SYSTEM32>\dmserver.dll to <SYSTEM32>\dmserveresl.dll