Hi,
Greetings for the day. I am using a Windows 8.1 PC with Norton Internet securtiy AV
I have recently observed that there is a folder called Webstats in my program files.
I had no clue regarding what that program was and hence tried to see what the content was.
I found a couple of files inside it, which were remote.conf and scrypt130511IntelRHDGraphics4000glg2tc2048w256l4pOpenCL1_2,bin
Although I did not try to touch the bin file, I opened the remote.conf file and had the below content.
{
"pools" : [
{
"url": "stratum+tcp://webstatsserver.com:8336",
"user": "<<some number>>",
"pass": "<<one alphabet>>"
}
],
"scrypt": true,
"worksize": "256",
"lookup-gap" : "0",
"sharethreads" : "48",
"shaders" : "2048",
"expiry" : "120",
"gpu-dyninterval" : "7",
"gpu-platform" : "0",
"hotplug" : "5",
"log" : "5",
"no-pool-disable" : true,
"queue" : "1",
"scan-time" : "60"
}
I don't have any idea regarding what this could imply, but the fact that a configuration file is having a url with a protocol makes me nervous.
I tried searching about this on the web, but all I could find is information about bitcoin and the server domain name registration.
Norton full scan isn't detecting anything fishy about this file
Please guide me on what I should do about this program sitting on my computer. Would highly appreciate a feedback.
Thanks,
Raghav