Have been getting a new attack myself today. 
Some kind of coinminer that came from electrum-server.ninja (145.239.44.204, 5002)
traffic description TCP, Port 50002
I have version 3.3.8 and Norton so I can ignore it.
Just wanted you guys to know it was out there.

Hope this goes smoothly.

Looks like this is TrustMeImaDr in SealsWithClubs. Built up trust using various methods within the site and then scammed a bunch of people all at the same time and disappeared. Was reported to be at Missouri River Casino 3/2/14 playing the #8 tournament, but that could be a misdirection. Passing himself off as a med student with a wife.