PDA

View Full Version : scribol.com TCP connection by several programs?



Marnes
2015-04-26, 04:13
Hi

I was just going through my opened ports, and saw this: http://i.imgur.com/yKmZuxU.png

datacollector.coin.scribol.com being called by several trusted programs sounds extremely suspicious to me, like some sort of DLL injection. Do I need to worry about this? I can't find anything about this domain name showing up for other people.

Avira, Malwarebytes, Adwcleaner, Spybot and SAS did not find anything noteworthy. SFC does detect some broken files but they're not related, they're probably the result of some of my DIY work relating to the messy stuff I have to do sometimes. Nothing else in my system is out of the ordinary, nothing is slow or misbehaving or anything. It's just those weird TCP connections.

12190

https://dl.dropboxusercontent.com/u/3357590/Filebox/Addition.txt
https://dl.dropboxusercontent.com/u/3357590/Filebox/FRST.txt
https://dl.dropboxusercontent.com/u/3357590/Filebox/CBS.log

tashi
2015-04-26, 07:10
Hello Marnes,

Please produce the Farbar Recovery Scan Tool and aswMBR logs as shown in this forum's FAQ, and post them into a new topic, no outside links. :)

http://forums.spybot.info/showthread.php?t=288

A volunteer analyst will then advise.

Best regards.