While looking at some incoming malware, we noticed a
trojan-downloader that downloaded additional malware from
www.norton-kaspersky.com. Very funny. We've seen a similar domain (norton-kaspersky.ru) used by other downloaders already in December.

If you're a sysadmin, you might want to filter your traffic to that domain.

The same IP also has other interesting hosts, including
www.spamh0use.com, www.norton-av2007.com,
and www.kusik-tusik-traff.com.