1. Symantec/
  2. VPN Filter checker
vpnfilter

Check Your Router for VPNFilter

VPNFilter is a threat that targets a wide range of routers and network-attached storage (NAS) devices. VPNFilter can collect confidential information and tamper with network traffic as it passes through an infected router, as well as render the router unusable. The malware can also survive a reboot of the router.

Symantec offers this free online tool that performs a quick check to determine if your router may be impacted by VPNFilter.

The online tool checks if your device has been compromised by a specific component used by VPNFilter, known as the the ssler plugin. If this tool finds that your router is not infected with the ssler plugin, your router may still be compromised by other threats or components of VPNFilter. VPNFilter impacts a wide range of routers and a list of vulnerable routers is available in our blog on this malware.

Click here to indicate that you have read and agree to the terms of the VPNFilter Check Terms of Use .

Terms of Use for the VPNFilter Check Tool

Last Updated June 22nd, 2018

These Terms of Use govern your access to and use of this free VPNFilter Check tool ("Tool"). Any reference to “you” or “your” means you as a user of the Tool. By using the Tool, you agree and consent to these Terms of Use and any referenced and incorporated guidelines and policies, including the terms of Symantec’s Privacy Statement and Notice and Website Terms of Use (collectively, the “Terms”). If you are using the Tool on behalf of a business or a third-party entity, you represent to Symantec that you have authority to bind that business or entity to these Terms, and that business or third-party entity accepts these Terms. Symantec may update and amend these Terms from time to time and any changes will be posted on the applicable webpage. By continuing to access or use the Tool after any changes become effective, you agree to be bound by the revised Terms.

Restrictions on Your Use of the Tool

You agree that you may not use or attempt to:

  • use the Tool in any way that breaches any applicable local, national, or international law or regulation;
  • use the Tool in any way which could infringe the rights or interests of Symantec, or any third party, including for example, to prove or disprove a concept or discredit, or bait any actor in the anti-malware space;
  • copy, reproduce, alter, modify, create derivative works, publicly display, republish, upload, post, transmit, resell or distribute in any way material, information or functionalities from the Tool;
  • transfer any rights granted to you under the Terms;
  • use the Tool for any illegal activity or output, or in any way that exposes Symantec or a third party to harm;
  • attempt to gain unauthorized access to Symantec website, the server on which Symantec website is stored or any server, computer or database connected to Symantec website; or
  • engage in any activity that could damage, overload, harm or impede the normal functioning of the Tool.

Symantec Rights

All rights, title, and interest in and to the Tool (excluding third party brand names) are and will remain the exclusive property of Symantec and its licensors. Nothing in these Terms should be construed as conferring by implication or otherwise any license or right under any intellectual property or proprietary interest of Symantec, its licensors or any third party.

Disclaimers

Your access to and use of the Tool is at your own risk. You understand and agree that the Tool is provided to you on an "AS IS" WITHOUT REPRESENTATION OR WARRANTY, WHETHER IT IS EXPRESS, IMPLIED, OR STATUTORY. WITHOUT LIMITING THE FOREGOING, SYMANTEC SPECIFICALLY DISCLAIMS ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

SYMANTEC DOES NOT WARRANT OR GUARANTEE THAT THE TOOL, OR ANY OUTPUT OR RESULTS GENERATED BY THE TOOL, ARE ACCURATE, RELIABLE OR CORRECT; THAT THE TOOL WILL MEET YOUR REQUIREMENTS; THAT THE TOOL WILL BE AVAILABLE AT ANY PARTICULAR TIME OR LOCATION, UNINTERRUPTED, ERROR-FREE, WITHOUT DEFECT OR SECURE; THAT ANY DEFECTS OR ERRORS WILL BE CORRECTED; OR THAT THE TOOL IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

Symantec will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your access to or use of the Tool or any third-party content or websites accessed through, or in any way in conjunction with, the Tool.

Except as may be required by law and as set forth in Symantec’s Privacy Statement and Notice , you further understand and agree that Symantec has no responsibility or liability for the deletion of, or the failure to store or transmit any materials or communications maintained by the Tool.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL SYMANTEC BE LIABLE TO ANY PARTY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES OF ANY TYPE WHATSOEVER RELATED TO OR ARISING FROM (i)YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE TOOL; AND (ii) ANY CONTENT OBTAINED FROM THE TOOL, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE) OR ANY OTHER LEGAL THEORY, WHETHER OR NOT SYMANTEC HAS BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGE. THE FOREGOING LIMITATION OF LIABILITY WILL APPLY TO THE FULLEST EXTENT PERMITTED BY LAW IN THE APPLICABLE JURISDICTION.


What to do if you are infected

If you are concerned that your router is infected by VPNFilter, we recommend performing the following steps in order. Please consult the documentation for your device for specific details on how to perform these steps:
  1. Perform a hard reset of your router to restore its factory settings. Please save your router configuration first, as you will need to reconfigure your router after this step.
  2. Power down and restart the router. Note that simply restarting your router without first performing the factory reset may not remove VPNFilter.
  3. Change the default administrator password for your router to a more secure password. If possible, disconnect your router from the public Internet while performing this step.
  4. Apply the latest patches and updates for your router.

Norton Core

Norton Core, Symantec’s secure Wi-Fi router, helps protect against VPNFilter. Read more about how Norton Core can help protect your connected home network.

Norton Mobile Security

Norton Mobile Security can detect and block activity associated with VPNFilter. Download Norton Mobile Security to protect against VPNFilter.

Symantec Endpoint Protection Mobile

Symantec Endpoint Protection Mobile provides protection from VPNFilter