PonmocupIOC for Ponmocup\Vundo Christopher Bentley2011-11-22T21:03:35
http://www9.dyndns-server.com:8080/pub/botnet-links.html
820ed1d99e2b771d915e033450fa0b0fbd291073fc2cb39456886d091a5ee85c593af63840f11883610ba95d6744c4b1checkwebspeed.netWBEMPROVIDERSTATICMUTEXHKEY_LOCAL_MACHINE\SOFTWARE\qrjaslopHKEY_CURRENT_USER\Software\zpppmcegc96.126.106.156http://imagehut4.cn/update/utu.da\temp\scse.tmp\temp\scsf.tmp184.105.178.92HKEY_LOCAL_MACHINE\Software\NojrkfkypC:\WINDOWS\system32\drivers\etc\hosts94.75.201.3585.17.139.23985.17.139.23885.17.188.19594.75.201.36 94.75.234.9894.75.234.107174.36.82.15178.159.100.32HKEY_CURRENT_USER\Software\GHUZPSKhtml/license_43EC922A3D0E1F403834ED406BA80D5A686E