Reply
Contributor
malwarekiller
Posts: 10
Registered: ‎09-12-2011
Accepted Solution

Norton DNS and flame malware

Is norton DNS blocking access to C&C servers of flame malware and the malicious sites hosting this nasty??

Phishing Phryer
DaveH
Posts: 4,680
Registered: ‎01-06-2010

Re: Norton DNS and flame malware

I certainly hope not.

 

Newbie
favkjv
Posts: 1
Registered: ‎05-30-2012

Re: Norton DNS and flame malware

Hello,

 

I've been using Norton for 20 years, but this is my first post on this site. My wife just sent me an email supposedly from Norton that is listed below. I have never gotten email alerts like this, especially ones that try and sell me Symantic Security.

 

 

-----Original Message-----
From: Norton [mailto:norton@nortonfromsymantec.com] 
Sent: Tuesday, May 29, 2012 8:20 PM
 
Subject: Security Alert: Information on Flamer

Norton by Symantec <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSRVXLX> 	 
Protecting the Stuff that matters.™
SERVICE NOTIFICATION
To view this message as a web page, click here <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSSVGf6beX... .
		
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	Your PC may be at risk from Flamer	  <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
	
	
	
		
Flamer has managed to infect a large number of computers worldwide. Are you protected?
Norton has been tracking and monitoring the recent online spread of Flamer and we wanted to inform you that without a current Internet security product subscription, your PC may be open to infection.

Sincerely,
The Norton Team

Learn more about Flamer <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVUWVXLX> 
	
 	 
	
 Norton AntiVirus<http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
	
	
 Norton Internet Security<http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
	
	
 Norton 360<http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
	
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	Buy Now <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVUYVXLX> 
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	Buy Now <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVUAVXLX> 
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	Buy Now <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVUBVXLX> 
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
MSRP $39.99*
Winning protection against viruses, spyware and more.
1 year protection
Windows 7/XP/Vista ®
MSRP $79.99
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... $49.99*
The fastest virus, spyware Internet protection you can buy.
1 year protection for up to 3 PCs
Windows 7/XP/Vista ®
MSRP $89.99
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... $69.99*
Ultimate protection, performance and peace of mind against digital dangers.
1 year protection for up to 3 PCs
Windows 7/XP/Vista ®
	
	
 <http://a248.e.akamai.net/f/248/25855/14d/ig.rsys1.net/responsysimages/symantec/2012_Virus_Outbreak/... 	
Online Store <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSWVXLX>      Norton Support <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSYVXLX>      Legal Information <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSAVXLX>      Privacy Policy <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSBVXLX>      Unsubscribe <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSCVGf6beX... 
You have received this email as a service message from Symantec regarding the status of your Norton product subscription.

*Plus tax (if applicable). Limited time offer valid only for downloadable product through this online offer. Good only in the US. Prices may vary. 1 Year Protection: With this service you receive the right to use this product on one PC or on the specified number of PCs during the service period, which begins upon initial installation and activation. This renewable service includes protection updates and new product features as available throughout the service period, subject to acceptance of the Symantec License Agreement included with this product and available for review at www.symantec.com <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVSDVXLX> . Product features may be added, modified or removed during the service period.

Copyright © 2012 Symantec Corporation. All rights reserved. Symantec, the Symantec logo, Norton, and Norton 360 are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Windows and Windows Vista are trademarks or registered trademarks of Microsoft Corporation. Other names may be trademarks of their respective owners.

DO NOT REPLY TO THIS MESSAGE. If you require Customer Service or Technical Support, please go to the Symantec Web site for contact information at www.symantec.com <http://response.nortonfromsymantec.com/servlet/cc6?kPuHglLJQWCBTQYVsHPQNHoHtpsxKJHHQuptVaVTRVXLX> . 

NAM_US_EN_R_VA_E_20120529

 <http://response.nortonfromsymantec.com/servlet/eof?lRtHgmLJDXBAVDYErHRDOHoHsprFKJHHDtpsEaEvEwyv.2e1... 
dickevans
Posts: 9,231
Registered: ‎04-08-2008

Re: Norton DNS and flame malware

favkjv,

Please take two deep breaths and know that all is well with the world. Then please tell your wife to relax there is no need to panic. Symantec/Norton is aware of this virus and also the amount of press it is getting in writing and TV. In an attempt to counter the expected flood of panicked users and potential users they sent out the email letting everybody know that they have already updated the Norton products to protect you from harm. Marketing had to get their two cents in so there is also a plea for you to be sure you are protected by buying one of the Norton solutions.

I don't expect this to happen often. I do think that Symantec/Norton will try to stay on top of the threat situation and be proactive in notifying us when the media appears to be trying to generate more sales and or a panic.

We'll be here when you need us.

 

 

PS: been using Norton products since they were distributed on a 5.25 floppy :smileywink: Only one and it retailed for $10.00 :smileyhappy:

Dick
Win7x64 SP1 current NIS V20
Phishing Phryer
DaveH
Posts: 4,680
Registered: ‎01-06-2010

Re: Norton DNS and flame malware

It would be disappointing to find that Norton is trying to capitalize off this.

 

Since it's a cyber attack against Iran and only 400 systems are known to be infected with none of them in the "free world" I think your chance of getting is is pretty slim.

Unless of course you happen to have a bunch of centrifuges in your basement enriching uranium.

 

 

 

dickevans
Posts: 9,231
Registered: ‎04-08-2008

Re: Norton DNS and flame malware

[ Edited ]

DaveH wrote:

It would be disappointing to find that Norton is trying to capitalize off this.

 

Since it's a cyber attack against Iran and only 400 systems are known to be infected with none of them in the "free world" I think your chance of getting is is pretty slim.

Unless of course you happen to have a bunch of centrifuges in your basement enriching uranium.

  


Isn't that covered on one of the NDA's we signed?:smileylol:

Dick
Win7x64 SP1 current NIS V20
Phishing Phryer
DaveH
Posts: 4,680
Registered: ‎01-06-2010

Re: Norton DNS and flame malware


dickevans wrote:

Isn't that covered on one of the NDA's we signed?:smileylol:


As an American or Norton Guru?

I don't belive I'm under any sort of gag order.

Symantec Employee
KatieQ
Posts: 4,154
Registered: ‎04-09-2009

Re: Norton DNS and flame malware

Hi malwarekiller,

 

Norton ConnectSafe (Norton DNS) doesn’t specifically protect against the Flamer Trojan by the way of Norton antivirus products (like Norton 360 and NIS) would.  As long as any known Flamer URLs have been targeted by response and picked up by Norton, then a user would be prevented from accessing that site by Norton ConnectSafe/Safe Web. 

 

 

 

Thanks,

Katie

Newbie
Simon12
Posts: 2
Registered: ‎05-31-2012

Re: Norton DNS and flame malware

Oh my god, Flame just hit me. I just bought the norton softwre and hope, it helps!

Contributor
malwarekiller
Posts: 10
Registered: ‎09-12-2011

Re: Norton DNS and flame malware

thanks for assurance! so norton DNS is capable of blockking down the malicious URL's hostong this maware...nice!