Host Name: MONO
OS Name: Microsoft Windows Serverr 2008 Enterprise
OS Version: 6.0.6002 Service Pack 2 Build 6002
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Server
OS Build Type: Multiprocessor Free
Registered Owner: Windows User
Registered Organization:
Product ID: 92516-083-1000042-76528
Original Install Date: 10/9/2016, 6:07:53 AM
System Boot Time: 11/18/2016, 4:14:56 AM
System Manufacturer: VMware, Inc.
System Model: VMware Virtual Platform
System Type: X86-based PC
Processor(s): 1 Processor(s) Installed.
Network Card(s): 1 NIC(s) Installed.
[01]: Intel(R) PRO/1000 MT Network Connection
Connection Name: Local Area Connection
DHCP Enabled: No
IP address(es)
[01]: 191.101.31.208
---
===========================================================================
Interface List
11 ...00 50 56 b0 1d e1 ...... Intel(R) PRO/1000 MT Network Connection
1 ........................... Software Loopback Interface 1
12 ...00 00 00 00 00 00 00 e0 isatap.{89892852-7FA6-47FB-886D-0C61C31469B0}
10 ...00 00 00 00 00 00 00 e0 6TO4 Adapter
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 191.101.31.65 191.101.31.208 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
191.101.31.192 255.255.255.192 On-link 191.101.31.208 266
191.101.31.208 255.255.255.255 On-link 191.101.31.208 266
191.101.31.255 255.255.255.255 On-link 191.101.31.208 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 191.101.31.208 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 191.101.31.208 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 217.64.114.161 Default
0.0.0.0 0.0.0.0 191.101.31.65 Default
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
10 1110 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
10 1010 2002::/16 On-link
10 266 2002:bf65:1fd0::bf65:1fd0/128
On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
--
Volume in drive C has no label.
Volume Serial Number is 7CD7-0C37
Directory of C:\Users\Administrator\Desktop\nano
11/18/2016 01:51 PM <DIR> .
11/18/2016 01:51 PM <DIR> ..
09/07/2016 06:46 PM 165,888 Authenticator.dll
06/30/2016 01:39 PM 7,813 builder.log
11/15/2016 02:20 AM 266,752 client.bin
11/15/2016 02:20 AM 9,216 ClientPlugin.dll
11/15/2016 02:20 AM 10,200 ClientPlugin.xml
11/18/2016 01:51 PM 24 compiler.bin
11/18/2016 01:51 PM <DIR> Databases
07/05/2016 02:55 PM 341 loader.log
11/15/2016 02:20 AM 194 login.bin
09/07/2016 06:46 PM 31,744 Lzma.dll
09/07/2016 06:46 PM 283,136 Mono.Cecil.dll
11/15/2016 02:20 AM 1,718,272 NanoCore.exe
09/07/2016 06:46 PM 67,072 NanoCore_Updater.exe
11/15/2016 02:20 AM <DIR> News
11/15/2016 02:20 AM 44,032 PluginCompiler.exe
10/16/2016 09:54 PM <DIR> Plugins
11/18/2016 01:51 PM 144 plugins.bin
06/18/2016 09:20 PM 62 public.bin
11/16/2016 11:25 PM <DIR> Resources
11/18/2016 01:51 PM 64,544,792 server.log
11/15/2016 02:20 AM 20,992 ServerPlugin.dll
11/15/2016 02:20 AM 43,972 ServerPlugin.xml
11/18/2016 01:51 PM 400 settings.bin
06/28/2016 12:56 PM <DIR> Snapshots
06/18/2016 09:16 PM 262,144 System.Data.SQLite.dll
11/18/2016 01:51 PM 180 Tasks.dat
09/07/2016 06:46 PM 40,960 Updater.exe
06/28/2016 12:56 PM <DIR> x64
06/28/2016 12:56 PM <DIR> x86
22 File(s) 67,518,330 bytes
9 Dir(s) 4,268,736,512 bytes free
---
C:\Users\Administrator\Desktop\nano\builder.log
Saturday, 18 June 2016
22:55: Compiling 'C:\Users\CodeSpirit\Desktop\nano\server1.exe'..
22:55: BuildTime = 06/18/2016 21:55:39
22:55: Version = 1.2.2.6
22:55: Mutex = f50d73e7-8dc1-4589-8831-196393217941
22:55: DefaultGroup = codespirit
22:55: PrimaryConnectionHost = 151.236.28.106
22:55: BackupConnectionHost = 151.236.28.106
22:55: ConnectionPort = 21916
22:55: RunOnStartup = False
22:55: RequestElevation = False
22:55: BypassUserAccountControl = False
22:55: ClearZoneIdentifier = True
22:55: ClearAccessControl = False
22:55: SetCriticalProcess = False
22:55: PreventSystemSleep = True
22:55: ActivateAwayMode = False
22:55: EnableDebugMode = False
22:55: RunDelay = 0
22:55: UseCustomDnsServer = True
22:55: PrimaryDnsServer = 8.8.8.8
22:55: BackupDnsServer = 8.8.4.4
22:55: Converting output architecture from AnyCPU to x86..
22:55: Stub will only connect to the current 'codspirit' license.
22:55: Compiling has succeeded. Size: 130.50 KB
Sunday, 19 June 2016
15:54: Compiling 'C:\Users\CodeSpirit\Desktop\nano\serverjoe.exe'..
15:54: BuildTime = 06/19/2016 14:54:15
15:54: Version = 1.2.2.6
15:54: Mutex = c0a2334a-0d4f-43d8-ae60-40f5c6d4aef5
15:54: DefaultGroup = Joe SA
15:54: PrimaryConnectionHost = avastmail.jumpingcrab.com
15:54: BackupConnectionHost = avastmail.jumpingcrab.com
15:54: ConnectionPort = 21916
15:54: RunOnStartup = True
15:54: RequestElevation = False
15:54: BypassUserAccountControl = True
15:54: BypassUserAccountControlData = System.Byte[]
15:54: ClearZoneIdentifier = True
15:54: ClearAccessControl = False
15:54: SetCriticalProcess = False
15:54: PreventSystemSleep = True
15:54: ActivateAwayMode = False
15:54: EnableDebugMode = False
15:54: RunDelay = 5
15:54: Converting output architecture from AnyCPU to x86..
15:54: Stub will only connect to the current 'codspirit' license.
15:54: Compiling has succeeded. Size: 131.00 KB
Sunday, 19 June 2016
18:46: Compiling 'C:\Users\CodeSpirit\Desktop\nano\NANOAGAIN.exe'..
18:46: BuildTime = 06/19/2016 17:46:13
18:46: Version = 1.2.2.6
18:46: Mutex = 8b96918d-0c74-4e09-b5f5-12e6f68d7451
18:46: DefaultGroup = JOE SA
18:46: PrimaryConnectionHost = codefbi.ignorelist.com
18:46: BackupConnectionHost = codefbi.ignorelist.com
18:46: ConnectionPort = 21916
18:46: RunOnStartup = False
18:46: RequestElevation = False
18:46: BypassUserAccountControl = False
18:46: ClearZoneIdentifier = True
18:46: ClearAccessControl = False
18:46: SetCriticalProcess = False
18:46: PreventSystemSleep = True
18:46: ActivateAwayMode = False
18:46: EnableDebugMode = False
18:46: RunDelay = 0
18:46: UseCustomDnsServer = True
18:46: PrimaryDnsServer = 8.8.8.8
18:46: BackupDnsServer = 8.8.4.4
18:46: Converting output architecture from AnyCPU to x86..
18:46: Stub will only connect to the current 'codspirit' license.
18:46: Compiling has succeeded. Size: 130.50 KB
18:49: Compiling 'C:\Users\CodeSpirit\Desktop\nano\nanojoe.exe'..
18:49: BuildTime = 06/19/2016 17:49:47
18:49: Version = 1.2.2.6
18:49: Mutex = 448b2b17-8add-4d18-b63b-249c4a38c0ed
18:49: DefaultGroup = JOE SA
18:49: PrimaryConnectionHost = avastmail.jumpingcrab.com
18:49: BackupConnectionHost = avastmail.jumpingcrab.com
18:49: ConnectionPort = 21916
18:49: RunOnStartup = False
18:49: RequestElevation = False
18:49: BypassUserAccountControl = False
18:49: ClearZoneIdentifier = True
18:49: ClearAccessControl = False
18:49: SetCriticalProcess = False
18:49: PreventSystemSleep = True
18:49: ActivateAwayMode = False
18:49: EnableDebugMode = False
18:49: RunDelay = 0
18:49: UseCustomDnsServer = True
18:49: PrimaryDnsServer = 8.8.8.8
18:49: BackupDnsServer = 8.8.4.4
18:49: Converting output architecture from AnyCPU to x86..
18:49: Stub will only connect to the current 'codspirit' license.
18:49: Compiling has succeeded. Size: 130.50 KB
Monday, 20 June 2016
19:52: Compiling 'C:\Users\CodeSpirit\Desktop\nano\aliword.exe'..
19:52: BuildTime = 06/20/2016 18:52:14
19:52: Version = 1.2.2.6
19:52: Mutex = d65a2c3a-5a66-4eeb-873a-eb135b6075eb
19:52: DefaultGroup = Default
19:52: PrimaryConnectionHost = alicode.strangled.net
19:52: BackupConnectionHost = alicode.strangled.net
19:52: ConnectionPort = 5239
19:52: RunOnStartup = False
19:52: RequestElevation = False
19:52: BypassUserAccountControl = False
19:52: ClearZoneIdentifier = True
19:52: ClearAccessControl = False
19:52: SetCriticalProcess = False
19:52: PreventSystemSleep = True
19:52: ActivateAwayMode = False
19:52: EnableDebugMode = False
19:52: RunDelay = 0
19:52: UseCustomDnsServer = True
19:52: PrimaryDnsServer = 8.8.8.8
19:52: BackupDnsServer = 8.8.4.4
19:52: Converting output architecture from AnyCPU to x86..
19:52: Stub will only connect to the current 'codspirit' license.
19:52: Compiling has succeeded. Size: 130.50 KB
19:54: Compiling 'C:\Users\CodeSpirit\Desktop\nano\aliword.exe'..
19:54: BuildTime = 06/20/2016 18:54:15
19:54: Version = 1.2.2.6
19:54: Mutex = 9216d895-fdd8-4435-8fbf-d7e7f1e98bae
19:54: DefaultGroup = Default
19:54: PrimaryConnectionHost = alicode.strangled.net
19:54: BackupConnectionHost = alicode.strangled.net
19:54: ConnectionPort = 51301
19:54: RunOnStartup = False
19:54: RequestElevation = False
19:54: BypassUserAccountControl = False
19:54: ClearZoneIdentifier = True
19:54: ClearAccessControl = False
19:54: SetCriticalProcess = False
19:54: PreventSystemSleep = True
19:54: ActivateAwayMode = False
19:54: EnableDebugMode = False
19:54: RunDelay = 0
19:54: UseCustomDnsServer = True
19:54: PrimaryDnsServer = 8.8.8.8
19:54: BackupDnsServer = 8.8.4.4
19:54: Converting output architecture from AnyCPU to x86..
19:54: Stub will only connect to the current 'codspirit' license.
19:54: Compiling has succeeded. Size: 130.50 KB
Wednesday, 22 June 2016
08:15: Compiling 'C:\Users\CodeSpirit\Desktop\nano\alime.exe'..
08:15: BuildTime = 06/22/2016 07:15:44
08:15: Version = 1.2.2.6
08:15: Mutex = 9ed12028-f627-48eb-9008-d57337e9df5c
08:15: DefaultGroup = alibaba
08:15: PrimaryConnectionHost = alicode.strangled.net
08:15: BackupConnectionHost = alicode.strangled.net
08:15: ConnectionPort = 51301
08:15: RunOnStartup = False
08:15: RequestElevation = False
08:15: BypassUserAccountControl = False
08:15: ClearZoneIdentifier = True
08:15: ClearAccessControl = False
08:15: SetCriticalProcess = False
08:15: PreventSystemSleep = True
08:15: ActivateAwayMode = False
08:15: EnableDebugMode = False
08:15: RunDelay = 0
08:15: UseCustomDnsServer = True
08:15: PrimaryDnsServer = 8.8.8.8
08:15: BackupDnsServer = 8.8.4.4
08:15: Converting output architecture from AnyCPU to x86..
08:15: Stub will only connect to the current 'codspirit' license.
08:15: Compiling has succeeded. Size: 130.50 KB
Thursday, 30 June 2016
02:46: Compiling 'C:\Users\NAS\Desktop\nano\alibaba.exe'..
02:46: BuildTime = 06/30/2016 01:46:06
02:46: Version = 1.2.2.6
02:46: Mutex = 6460858c-d59f-4643-b240-584849cf4baf
02:46: DefaultGroup = alibaba
02:46: PrimaryConnectionHost = avastmail.jumpingcrab.com
02:46: BackupConnectionHost = avastmail.jumpingcrab.com
02:46: ConnectionPort = 21916
02:46: RunOnStartup = False
02:46: RequestElevation = False
02:46: BypassUserAccountControl = False
02:46: ClearZoneIdentifier = True
02:46: ClearAccessControl = False
02:46: SetCriticalProcess = False
02:46: PreventSystemSleep = True
02:46: ActivateAwayMode = False
02:46: EnableDebugMode = False
02:46: RunDelay = 0
02:46: UseCustomDnsServer = True
02:46: PrimaryDnsServer = 8.8.8.8
02:46: BackupDnsServer = 8.8.4.4
02:46: Converting output architecture from AnyCPU to x86..
02:46: Stub will only connect to the current 'codspirit' license.
02:46: Compiling has succeeded. Size: 130.50 KB
---
hxtp://avast-mail-security.download/save/n/upload/At4ywfkiytriy3.exe
hxtp://avast-mail-security.download/save/n/upload/btKHAYIfkhywfkiytriy3.exe
hxtp://avast-mail-security.download/save/n/upload/Keyfhywfkiytriy3.exe
hxtp://avast-mail-security.download/save/n/upload/nanodifhodugfoi.exe
hxtp://avast-mail-security.download/save/n/upload/newf75kut7rsdj.exe
hxtp://avast-mail-security.download/save/n/upload/Pow3fuyfsfuFUtd7e.exe
hxtp://avast-mail-security.download/save/n/upload/stfuyfsfuFUtd7e.exe
--
SELECT * FROM pony_system_log WHERE log_source LIKE 'login'
log_id report_id log_line log_source log_type log_extra import_time
1 NULL 41.113.33.115 login other codespirit 2016-11-15 16:18:35
2 NULL 197.210.226.23 login other codespirit 2016-11-15 18:08:41
3 NULL 41.113.19.161 login other codespirit 2016-11-15 22:24:50
4 NULL 197.210.227.205 login other codespirit 2016-11-15 23:30:10
7 NULL 41.113.34.185 login other codespirit 2016-11-16 11:18:25
9 NULL 41.113.32.84 login other codespirit 2016-11-16 14:07:04
10 NULL 197.210.227.179 login other codespirit 2016-11-16 14:49:04
12 NULL 41.113.110.114 login other codespirit 2016-11-16 17:36:01
13 NULL 197.210.24.133 login other codespirit 2016-11-16 18:04:07
14 NULL 41.113.3.2 login other codespirit 2016-11-16 21:30:28
15 NULL 197.210.24.184 login other codespirit 2016-11-17 00:28:59
16 NULL 41.113.56.37 login other codespirit 2016-11-17 09:53:38
18 NULL 197.210.25.163 login other codespirit 2016-11-17 10:38:42
28 NULL 41.113.98.50 login other codespirit 2016-11-17 13:47:13
34 NULL 41.113.121.158 login other codespirit 2016-11-17 17:18:47
35 NULL 41.113.8.152 login other codespirit 2016-11-17 22:28:50
40 NULL 105.112.17.68 login other codespirit 2016-11-18 11:50:36
41 NULL 41.113.69.136 login other codespirit 2016-11-18 12:45:08
43 NULL 197.210.226.175 login other codespirit 2016-11-18 17:06:08
44 NULL 197.210.227.114 login other codespirit 2016-11-18 17:25:57
45 NULL 41.113.28.245 login other codespirit 2016-11-18 18:05:40
46 NULL 41.113.108.243 login other codespirit 2016-11-18 22:07:15
48 NULL 197.210.44.35 login other codespirit 2016-11-19 11:58:17
50 NULL 41.113.21.213 login other codespirit 2016-11-19 21:02:05
Comments