91.212.65.145

[SysAdMini]

exploits

Code: [Select]

91.212.65.145/1/in.php
trojan, probably Zbot, needs verification

Code: [Select]

91.212.65.145/1/load.php?id=1http://www.virustotal.com/analisis/01c23f5ce56d7de6e11ad2bb5c9b06a4 8/40

[CkreM]

trojan, probably Zbot, needs verification

Code: [Select]

91.212.65.145/1/load.php?id=1http://www.virustotal.com/analisis/01c23f5ce56d7de6e11ad2bb5c9b06a4 8/40

yupp Zeus V1

Code: [Select]

91.212.65.145/474/ldr.exe
91.212.65.145/474/cfg.binDrop zone:

Code: [Select]

91.212.65.145/474/s.php

[MysteryFCM]

They're also valid as the following btw;

Code: [Select]

http://91.212.65.145/2/pdf.php
http://91.212.65.145/2/load.php?id=5