Technical Information
- <SYSTEM32>\dmserver.dll with <SYSTEM32>\dmserver.dll
- <SYSTEM32>\dmserver.dll
- '<SYSTEM32>\cmd.exe' /c %TEMP%\mpvoau.bat
- %TEMP%\mpvoau.bat
- <SYSTEM32>\mssockiw.dll
- <SYSTEM32>\msftpd.dll
- from <SYSTEM32>\dmserver.dll to <SYSTEM32>\dmserveresl.dll