Norton 360

[GeorgeBrengelmann]

EMail with following text purports to be from Norton (I've not seen the html version of the message, just the text:

Presumably spoofed.  No?

Dear Norton Subscriber , Thank you for responding to the Norton Renewal Offer email. We feel great pleasure to inform you that you have been nominated for 6 months of free subscription with the purchase of 2 year Renewal and 2 months of free subscription with the purchase of 1 year Renewal. To renew or extend your Norton subscription with Norton Renewal offer please click on the link given below. Norton Renewal Center Note: Please reply to this email in case our chat support link does not connect you to Norton Renewal Center. Regards, Julia Smith, Norton Renewal Support Team

[dickevans Super RootKit Eradicator]

---

GeorgeBrengelmann wrote:

EMail with following text purports to be from Norton (I've not seen the html version of the message, just the text:

Presumably spoofed.  No?

Dear Norton Subscriber , Thank you for responding to the Norton Renewal Offer email. We feel great pleasure to inform you that you have been nominated for 6 months of free subscription with the purchase of 2 year Renewal and 2 months of free subscription with the purchase of 1 year Renewal. To renew or extend your Norton subscription with Norton Renewal offer please click on the link given below. Norton Renewal Center Note: Please reply to this email in case our chat support link does not connect you to Norton Renewal Center. Regards, Julia Smith, Norton Renewal Support Team

---

Welcome George,

That looks like one of thse that should have the cover sheet 'delete before reading' attached. I hope you have done nothing more than delete the message. You might also add the email address to your blocked address list.

Stay well and surf safe

[GeorgeBrengelmann]

I think my ISP scrubbed the payload -- turns out there was no .html .  Full header revealed a google email return path.  I had responded to their previous email with "please clarify", there was never a chance for a payload to be executed.  .  This was a new one to me. 

[dickevans Super RootKit Eradicator]

---

GeorgeBrengelmann wrote:

I think my ISP scrubbed the payload -- turns out there was no .html .  Full header revealed a google email return path.  I had responded to their previous email with "please clarify", there was never a chance for a payload to be executed.  .  This was a new one to me. 

---

The only possible problem I see for the future is that they now have your confirmed valid email address Be sure to put their email address on your blocked senders list.

Stay well and surf safe

[GeorgeBrengelmann · Accepted solution]

Right, darn it.  Thanks a lot.  Over and out