Results 1 to 2 of 2

Thread: scribol.com TCP connection by several programs?

  1. #1
    Junior Member Marnes's Avatar
    Join Date
    Apr 2015
    Location
    Antwerp
    Posts
    7

    Default scribol.com TCP connection by several programs?

    Hi

    I was just going through my opened ports, and saw this: http://i.imgur.com/yKmZuxU.png

    datacollector.coin.scribol.com being called by several trusted programs sounds extremely suspicious to me, like some sort of DLL injection. Do I need to worry about this? I can't find anything about this domain name showing up for other people.

    Avira, Malwarebytes, Adwcleaner, Spybot and SAS did not find anything noteworthy. SFC does detect some broken files but they're not related, they're probably the result of some of my DIY work relating to the messy stuff I have to do sometimes. Nothing else in my system is out of the ordinary, nothing is slow or misbehaving or anything. It's just those weird TCP connections.

    aswMBR.txt

    https://dl.dropboxusercontent.com/u/3357590/Filebox/Addition.txt
    https://dl.dropboxusercontent.com/u/3357590/Filebox/FRST.txt
    https://dl.dropboxusercontent.com/u/3357590/Filebox/CBS.log

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello Marnes,

    Please produce the Farbar Recovery Scan Tool and aswMBR logs as shown in this forum's FAQ, and post them into a new topic, no outside links.

    http://forums.spybot.info/showthread.php?t=288

    A volunteer analyst will then advise.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •