Host Name: MONO OS Name: Microsoft Windows Serverr 2008 Enterprise OS Version: 6.0.6002 Service Pack 2 Build 6002 OS Manufacturer: Microsoft Corporation OS Configuration: Standalone Server OS Build Type: Multiprocessor Free Registered Owner: Windows User Registered Organization: Product ID: 92516-083-1000042-76528 Original Install Date: 10/9/2016, 6:07:53 AM System Boot Time: 11/18/2016, 4:14:56 AM System Manufacturer: VMware, Inc. System Model: VMware Virtual Platform System Type: X86-based PC Processor(s): 1 Processor(s) Installed. Network Card(s): 1 NIC(s) Installed. [01]: Intel(R) PRO/1000 MT Network Connection Connection Name: Local Area Connection DHCP Enabled: No IP address(es) [01]: 191.101.31.208 --- =========================================================================== Interface List 11 ...00 50 56 b0 1d e1 ...... Intel(R) PRO/1000 MT Network Connection 1 ........................... Software Loopback Interface 1 12 ...00 00 00 00 00 00 00 e0 isatap.{89892852-7FA6-47FB-886D-0C61C31469B0} 10 ...00 00 00 00 00 00 00 e0 6TO4 Adapter =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 191.101.31.65 191.101.31.208 266 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 191.101.31.192 255.255.255.192 On-link 191.101.31.208 266 191.101.31.208 255.255.255.255 On-link 191.101.31.208 266 191.101.31.255 255.255.255.255 On-link 191.101.31.208 266 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 191.101.31.208 266 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 191.101.31.208 266 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 0.0.0.0 0.0.0.0 217.64.114.161 Default 0.0.0.0 0.0.0.0 191.101.31.65 Default =========================================================================== IPv6 Route Table =========================================================================== Active Routes: If Metric Network Destination Gateway 10 1110 ::/0 2002:c058:6301::c058:6301 1 306 ::1/128 On-link 10 1010 2002::/16 On-link 10 266 2002:bf65:1fd0::bf65:1fd0/128 On-link 1 306 ff00::/8 On-link =========================================================================== Persistent Routes: None -- Volume in drive C has no label. Volume Serial Number is 7CD7-0C37 Directory of C:\Users\Administrator\Desktop\nano 11/18/2016 01:51 PM . 11/18/2016 01:51 PM .. 09/07/2016 06:46 PM 165,888 Authenticator.dll 06/30/2016 01:39 PM 7,813 builder.log 11/15/2016 02:20 AM 266,752 client.bin 11/15/2016 02:20 AM 9,216 ClientPlugin.dll 11/15/2016 02:20 AM 10,200 ClientPlugin.xml 11/18/2016 01:51 PM 24 compiler.bin 11/18/2016 01:51 PM Databases 07/05/2016 02:55 PM 341 loader.log 11/15/2016 02:20 AM 194 login.bin 09/07/2016 06:46 PM 31,744 Lzma.dll 09/07/2016 06:46 PM 283,136 Mono.Cecil.dll 11/15/2016 02:20 AM 1,718,272 NanoCore.exe 09/07/2016 06:46 PM 67,072 NanoCore_Updater.exe 11/15/2016 02:20 AM News 11/15/2016 02:20 AM 44,032 PluginCompiler.exe 10/16/2016 09:54 PM Plugins 11/18/2016 01:51 PM 144 plugins.bin 06/18/2016 09:20 PM 62 public.bin 11/16/2016 11:25 PM Resources 11/18/2016 01:51 PM 64,544,792 server.log 11/15/2016 02:20 AM 20,992 ServerPlugin.dll 11/15/2016 02:20 AM 43,972 ServerPlugin.xml 11/18/2016 01:51 PM 400 settings.bin 06/28/2016 12:56 PM Snapshots 06/18/2016 09:16 PM 262,144 System.Data.SQLite.dll 11/18/2016 01:51 PM 180 Tasks.dat 09/07/2016 06:46 PM 40,960 Updater.exe 06/28/2016 12:56 PM x64 06/28/2016 12:56 PM x86 22 File(s) 67,518,330 bytes 9 Dir(s) 4,268,736,512 bytes free --- C:\Users\Administrator\Desktop\nano\builder.log Saturday, 18 June 2016 22:55: Compiling 'C:\Users\CodeSpirit\Desktop\nano\server1.exe'.. 22:55: BuildTime = 06/18/2016 21:55:39 22:55: Version = 1.2.2.6 22:55: Mutex = f50d73e7-8dc1-4589-8831-196393217941 22:55: DefaultGroup = codespirit 22:55: PrimaryConnectionHost = 151.236.28.106 22:55: BackupConnectionHost = 151.236.28.106 22:55: ConnectionPort = 21916 22:55: RunOnStartup = False 22:55: RequestElevation = False 22:55: BypassUserAccountControl = False 22:55: ClearZoneIdentifier = True 22:55: ClearAccessControl = False 22:55: SetCriticalProcess = False 22:55: PreventSystemSleep = True 22:55: ActivateAwayMode = False 22:55: EnableDebugMode = False 22:55: RunDelay = 0 22:55: UseCustomDnsServer = True 22:55: PrimaryDnsServer = 8.8.8.8 22:55: BackupDnsServer = 8.8.4.4 22:55: Converting output architecture from AnyCPU to x86.. 22:55: Stub will only connect to the current 'codspirit' license. 22:55: Compiling has succeeded. Size: 130.50 KB Sunday, 19 June 2016 15:54: Compiling 'C:\Users\CodeSpirit\Desktop\nano\serverjoe.exe'.. 15:54: BuildTime = 06/19/2016 14:54:15 15:54: Version = 1.2.2.6 15:54: Mutex = c0a2334a-0d4f-43d8-ae60-40f5c6d4aef5 15:54: DefaultGroup = Joe SA 15:54: PrimaryConnectionHost = avastmail.jumpingcrab.com 15:54: BackupConnectionHost = avastmail.jumpingcrab.com 15:54: ConnectionPort = 21916 15:54: RunOnStartup = True 15:54: RequestElevation = False 15:54: BypassUserAccountControl = True 15:54: BypassUserAccountControlData = System.Byte[] 15:54: ClearZoneIdentifier = True 15:54: ClearAccessControl = False 15:54: SetCriticalProcess = False 15:54: PreventSystemSleep = True 15:54: ActivateAwayMode = False 15:54: EnableDebugMode = False 15:54: RunDelay = 5 15:54: Converting output architecture from AnyCPU to x86.. 15:54: Stub will only connect to the current 'codspirit' license. 15:54: Compiling has succeeded. Size: 131.00 KB Sunday, 19 June 2016 18:46: Compiling 'C:\Users\CodeSpirit\Desktop\nano\NANOAGAIN.exe'.. 18:46: BuildTime = 06/19/2016 17:46:13 18:46: Version = 1.2.2.6 18:46: Mutex = 8b96918d-0c74-4e09-b5f5-12e6f68d7451 18:46: DefaultGroup = JOE SA 18:46: PrimaryConnectionHost = codefbi.ignorelist.com 18:46: BackupConnectionHost = codefbi.ignorelist.com 18:46: ConnectionPort = 21916 18:46: RunOnStartup = False 18:46: RequestElevation = False 18:46: BypassUserAccountControl = False 18:46: ClearZoneIdentifier = True 18:46: ClearAccessControl = False 18:46: SetCriticalProcess = False 18:46: PreventSystemSleep = True 18:46: ActivateAwayMode = False 18:46: EnableDebugMode = False 18:46: RunDelay = 0 18:46: UseCustomDnsServer = True 18:46: PrimaryDnsServer = 8.8.8.8 18:46: BackupDnsServer = 8.8.4.4 18:46: Converting output architecture from AnyCPU to x86.. 18:46: Stub will only connect to the current 'codspirit' license. 18:46: Compiling has succeeded. Size: 130.50 KB 18:49: Compiling 'C:\Users\CodeSpirit\Desktop\nano\nanojoe.exe'.. 18:49: BuildTime = 06/19/2016 17:49:47 18:49: Version = 1.2.2.6 18:49: Mutex = 448b2b17-8add-4d18-b63b-249c4a38c0ed 18:49: DefaultGroup = JOE SA 18:49: PrimaryConnectionHost = avastmail.jumpingcrab.com 18:49: BackupConnectionHost = avastmail.jumpingcrab.com 18:49: ConnectionPort = 21916 18:49: RunOnStartup = False 18:49: RequestElevation = False 18:49: BypassUserAccountControl = False 18:49: ClearZoneIdentifier = True 18:49: ClearAccessControl = False 18:49: SetCriticalProcess = False 18:49: PreventSystemSleep = True 18:49: ActivateAwayMode = False 18:49: EnableDebugMode = False 18:49: RunDelay = 0 18:49: UseCustomDnsServer = True 18:49: PrimaryDnsServer = 8.8.8.8 18:49: BackupDnsServer = 8.8.4.4 18:49: Converting output architecture from AnyCPU to x86.. 18:49: Stub will only connect to the current 'codspirit' license. 18:49: Compiling has succeeded. Size: 130.50 KB Monday, 20 June 2016 19:52: Compiling 'C:\Users\CodeSpirit\Desktop\nano\aliword.exe'.. 19:52: BuildTime = 06/20/2016 18:52:14 19:52: Version = 1.2.2.6 19:52: Mutex = d65a2c3a-5a66-4eeb-873a-eb135b6075eb 19:52: DefaultGroup = Default 19:52: PrimaryConnectionHost = alicode.strangled.net 19:52: BackupConnectionHost = alicode.strangled.net 19:52: ConnectionPort = 5239 19:52: RunOnStartup = False 19:52: RequestElevation = False 19:52: BypassUserAccountControl = False 19:52: ClearZoneIdentifier = True 19:52: ClearAccessControl = False 19:52: SetCriticalProcess = False 19:52: PreventSystemSleep = True 19:52: ActivateAwayMode = False 19:52: EnableDebugMode = False 19:52: RunDelay = 0 19:52: UseCustomDnsServer = True 19:52: PrimaryDnsServer = 8.8.8.8 19:52: BackupDnsServer = 8.8.4.4 19:52: Converting output architecture from AnyCPU to x86.. 19:52: Stub will only connect to the current 'codspirit' license. 19:52: Compiling has succeeded. Size: 130.50 KB 19:54: Compiling 'C:\Users\CodeSpirit\Desktop\nano\aliword.exe'.. 19:54: BuildTime = 06/20/2016 18:54:15 19:54: Version = 1.2.2.6 19:54: Mutex = 9216d895-fdd8-4435-8fbf-d7e7f1e98bae 19:54: DefaultGroup = Default 19:54: PrimaryConnectionHost = alicode.strangled.net 19:54: BackupConnectionHost = alicode.strangled.net 19:54: ConnectionPort = 51301 19:54: RunOnStartup = False 19:54: RequestElevation = False 19:54: BypassUserAccountControl = False 19:54: ClearZoneIdentifier = True 19:54: ClearAccessControl = False 19:54: SetCriticalProcess = False 19:54: PreventSystemSleep = True 19:54: ActivateAwayMode = False 19:54: EnableDebugMode = False 19:54: RunDelay = 0 19:54: UseCustomDnsServer = True 19:54: PrimaryDnsServer = 8.8.8.8 19:54: BackupDnsServer = 8.8.4.4 19:54: Converting output architecture from AnyCPU to x86.. 19:54: Stub will only connect to the current 'codspirit' license. 19:54: Compiling has succeeded. Size: 130.50 KB Wednesday, 22 June 2016 08:15: Compiling 'C:\Users\CodeSpirit\Desktop\nano\alime.exe'.. 08:15: BuildTime = 06/22/2016 07:15:44 08:15: Version = 1.2.2.6 08:15: Mutex = 9ed12028-f627-48eb-9008-d57337e9df5c 08:15: DefaultGroup = alibaba 08:15: PrimaryConnectionHost = alicode.strangled.net 08:15: BackupConnectionHost = alicode.strangled.net 08:15: ConnectionPort = 51301 08:15: RunOnStartup = False 08:15: RequestElevation = False 08:15: BypassUserAccountControl = False 08:15: ClearZoneIdentifier = True 08:15: ClearAccessControl = False 08:15: SetCriticalProcess = False 08:15: PreventSystemSleep = True 08:15: ActivateAwayMode = False 08:15: EnableDebugMode = False 08:15: RunDelay = 0 08:15: UseCustomDnsServer = True 08:15: PrimaryDnsServer = 8.8.8.8 08:15: BackupDnsServer = 8.8.4.4 08:15: Converting output architecture from AnyCPU to x86.. 08:15: Stub will only connect to the current 'codspirit' license. 08:15: Compiling has succeeded. Size: 130.50 KB Thursday, 30 June 2016 02:46: Compiling 'C:\Users\NAS\Desktop\nano\alibaba.exe'.. 02:46: BuildTime = 06/30/2016 01:46:06 02:46: Version = 1.2.2.6 02:46: Mutex = 6460858c-d59f-4643-b240-584849cf4baf 02:46: DefaultGroup = alibaba 02:46: PrimaryConnectionHost = avastmail.jumpingcrab.com 02:46: BackupConnectionHost = avastmail.jumpingcrab.com 02:46: ConnectionPort = 21916 02:46: RunOnStartup = False 02:46: RequestElevation = False 02:46: BypassUserAccountControl = False 02:46: ClearZoneIdentifier = True 02:46: ClearAccessControl = False 02:46: SetCriticalProcess = False 02:46: PreventSystemSleep = True 02:46: ActivateAwayMode = False 02:46: EnableDebugMode = False 02:46: RunDelay = 0 02:46: UseCustomDnsServer = True 02:46: PrimaryDnsServer = 8.8.8.8 02:46: BackupDnsServer = 8.8.4.4 02:46: Converting output architecture from AnyCPU to x86.. 02:46: Stub will only connect to the current 'codspirit' license. 02:46: Compiling has succeeded. Size: 130.50 KB --- hxtp://avast-mail-security.download/save/n/upload/At4ywfkiytriy3.exe hxtp://avast-mail-security.download/save/n/upload/btKHAYIfkhywfkiytriy3.exe hxtp://avast-mail-security.download/save/n/upload/Keyfhywfkiytriy3.exe hxtp://avast-mail-security.download/save/n/upload/nanodifhodugfoi.exe hxtp://avast-mail-security.download/save/n/upload/newf75kut7rsdj.exe hxtp://avast-mail-security.download/save/n/upload/Pow3fuyfsfuFUtd7e.exe hxtp://avast-mail-security.download/save/n/upload/stfuyfsfuFUtd7e.exe -- SELECT * FROM pony_system_log WHERE log_source LIKE 'login' log_id report_id log_line log_source log_type log_extra import_time 1 NULL 41.113.33.115 login other codespirit 2016-11-15 16:18:35 2 NULL 197.210.226.23 login other codespirit 2016-11-15 18:08:41 3 NULL 41.113.19.161 login other codespirit 2016-11-15 22:24:50 4 NULL 197.210.227.205 login other codespirit 2016-11-15 23:30:10 7 NULL 41.113.34.185 login other codespirit 2016-11-16 11:18:25 9 NULL 41.113.32.84 login other codespirit 2016-11-16 14:07:04 10 NULL 197.210.227.179 login other codespirit 2016-11-16 14:49:04 12 NULL 41.113.110.114 login other codespirit 2016-11-16 17:36:01 13 NULL 197.210.24.133 login other codespirit 2016-11-16 18:04:07 14 NULL 41.113.3.2 login other codespirit 2016-11-16 21:30:28 15 NULL 197.210.24.184 login other codespirit 2016-11-17 00:28:59 16 NULL 41.113.56.37 login other codespirit 2016-11-17 09:53:38 18 NULL 197.210.25.163 login other codespirit 2016-11-17 10:38:42 28 NULL 41.113.98.50 login other codespirit 2016-11-17 13:47:13 34 NULL 41.113.121.158 login other codespirit 2016-11-17 17:18:47 35 NULL 41.113.8.152 login other codespirit 2016-11-17 22:28:50 40 NULL 105.112.17.68 login other codespirit 2016-11-18 11:50:36 41 NULL 41.113.69.136 login other codespirit 2016-11-18 12:45:08 43 NULL 197.210.226.175 login other codespirit 2016-11-18 17:06:08 44 NULL 197.210.227.114 login other codespirit 2016-11-18 17:25:57 45 NULL 41.113.28.245 login other codespirit 2016-11-18 18:05:40 46 NULL 41.113.108.243 login other codespirit 2016-11-18 22:07:15 48 NULL 197.210.44.35 login other codespirit 2016-11-19 11:58:17 50 NULL 41.113.21.213 login other codespirit 2016-11-19 21:02:05