Resolved dreiansc.ws to 188.8.131.52
Gate file: /adm/gate.php
Config file: /config/index.php
The owner forgot to remove the panel installation file. hxxp://dreiansc.ws/adm/install/index.php
Hosting infos: http://whois.domaintools.com/184.108.40.206
Related md5s (Search on malwr.com to download samples)
vps.ua - September 19, 2013 at 10:40 am
We have shut down host under IP 220.127.116.11. It can be started again only in case of full system re-setup with wiping all the data from disk.
Please, feel free to contact us if you find any abusive activity performed from our network.
Pig - September 19, 2013 at 2:55 pm
nice to see your fast reaction here 🙂