Could be a rope-a-dope? Maybe their program is moving along just fine.
No. I'm of the opinion that if they're even admitting that there's a problem, then it's a REALLY serious problem and they got no idea what it's doing or what to do about it and they need our help with it.
Symantec needs to check their visitors logs for .ir domains again.