Tech Outpost

[Krusty13]

As if we didn't have enough to be concerned about...  http://www.msnbc.msn.com/id/47590214/ns/technology_and_science-security/

Dave.

[dickevans Super RootKit Eradicator]

Dave.

The only constant is change and the good guys aren't leading in that race.

[Quads · Accepted solution]

It's a backdoor Trojan and worm like.

I have files,

http://www.symantec.com/connect/blogs/flamer-highly-sophisticated-and-discreet-threat-targets-middle...

Quads

[Krusty13]

Thanks for the info Quads,  and thanks also for the link.

Dave.

[Quads]

Tested files, Symantec was on the ball with this one

Symantec / Norton detects the files as W32.Flamer

Quads

[huwyngr Norton Fighter]

AndI just got this email from Norton:

You are currently protected from Flamer

While Flamer has managed to infect a large number of computers worldwide, you’re currently protected by Norton.

Norton has been tracking and monitoring the recent online spread of Flamer and we wanted to reassure you that with your current Norton product subscription, you've protected your PC against this current Internet threat.

Hackers, viruses, spyware, and Internet threats like Flamer prey on you when you are browsing, banking, shopping, or spending any time online. Luckily, you’ve protected your digital domain with Norton, so you’re free to go online with peace of mind.
Sincerely, The Norton Team

[Krusty13]

Thank Hugh.  That is reassuring to know.

Dave.

[Quads]

Just as I said above,

Symantec / Norton detects the files as W32.Flamer

Antivirus    Result     Update

AhnLab-V3 Worm/Win32.Flame 20120529
AntiVir TR/Flamer.A.4 20120529
Antiy-AVL - 20120530
Avast - 20120528
AVG Worm/Pakes.ATC 20120529
BitDefender Trojan.Flame.A 20120529
ByteHero - 20120522
CAT-QuickHeal - 20120529
ClamAV Worm.Flame 20120530
Commtouch - 20120529
Comodo Worm.Win32.Flame.a 20120530
DrWeb Win32.HLLW.Flame.1 20120530
Emsisoft Worm.Win32.Flame!IK 20120530
F-Prot - 20120529
F-Secure Trojan.Flame.A 20120529
Fortinet - 20120529
GData Trojan.Flame.A 20120529
Ikarus Worm.Win32.Flame 20120529
Jiangmin - 20120529
K7AntiVirus EmailWorm 20120529
Kaspersky Worm.Win32.Flame.a 20120529
McAfee SkyWiper 20120530
McAfee-GW-Edition SkyWiper 20120529
Microsoft Worm:Win32/Flame.gen!B 20120529
NOD32 Win32/Flamer.A 20120529
Norman W32/Flamer.A 20120529
nProtect Worm/W32.Flame.643072 20120529
Panda - 20120529
PCTools Malware.Flamer 20120530
Rising - 20120528
Sophos W32/Flame-A 20120529
SUPERAntiSpyware - 20120526
Symantec W32.Flamer 20120530
TheHacker - 20120529
TotalDefense - 20120530
TrendMicro WORM_FLAMER.A 20120530
TrendMicro-HouseCall WORM_FLAMER.A 20120529
VBA32 - 20120529
VIPRE Worm.Win32.Flame.a 20120529
ViRobot Worm.Win32.Flame.643072 20120529
VirusBuster Trojan.Flame.A 20120529

Quads

[Krusty13]

Here's Marrion Merritt's blog:-

http://community.norton.com/t5/Ask-Marian/Flamer-Blasts-Its-Way-Round-the-Middle-East/ba-p/727852

Dave.

[Quads]

It's easier to remove than the TDSS (TDL), Mebroot, Pihar, Max++, MaxSS families.

Quads