Resolved xylox.su to 190.123.45.12
Betabot
Gate file: /forums/order.php
Andromeda
Gate file: /foo/image.php
hosting infos: http://whois.domaintools.com/190.123.45.12
Related mds5 (Download samples from Malwr.com)
Betabot: a670deb3dd6febfcfda8392305041657
Andromeda: 26c7885b95501af4da1ffa621f793027