Glined: Infected with virus or trojan

Ask your general or IRC related questions.
__token
Posts: 1

Glined: Infected with virus or trojan

Post by __token »

Hey guys,

On connecting to Undernet, I've been getting glined with the message "Infected with a virus or trojan, please clean your system. Cleaner @ http://www.moosoft.com (P0)" and would like to know what triggers this.

tcpdump on the router shows nothing unexpected.
iptables has the router locked down pretty tightly, minimal open ports for some internet-facing services running on it.
I _am_ running a tor node (but not an exit node), does this make a difference?
There are no Windows hosts on the network.

Is this a case of a whole netblock being glined? What can I do to resolve this? Would opening an identd make a difference?

Hodari
Posts: 14

Post by Hodari »

Best way to resolve this would be to email abuse@undernet.org and ask about it there. Include the gline reason message and the exact nick!user@host and realname info you were using at the time.

ExcelPremium
Posts: 1

Post by ExcelPremium »

Same problem :(

Scanned with 2 FULL AV's (non trial versions) and Moosoft's "Cleaner" and none of them found any viruses or spyware but I keep getting G-Lined :(

ciaranc
Posts: 1

Post by ciaranc »

Same here. Im pretty sure im not infected by anything. Any ideas?

Spidel
Posts: 639
Location: Backyard

Post by Spidel »

Somebody else before you who had the glined ip, has been infected. Frequently happens on 3G connections, however see Hodari's answer; if you wanna fix it mail abuse@undernet.org
"A wise man writes down what he thinks, a stupid man forgets what he thinks, a complete idiot punishes himself for what he thinks."

bigoopa
Posts: 1

Post by bigoopa »

How can i recover my files when infected by trojan horse? my other computer was infected by trojan horse and it change my password. I can't seem to log in to my computer even if a used safe mode. I have a lot of important files in there. Hiw can i get my files if my password has been changed by trojan horse?

Spidel
Posts: 639
Location: Backyard

Post by Spidel »

If you can't access your OS, how was it possible to seek for help here? I just wonder
"A wise man writes down what he thinks, a stupid man forgets what he thinks, a complete idiot punishes himself for what he thinks."

User avatar
xplora
Posts: 564
Location: Hamilton, New Zealand

Post by xplora »

Spidel, he said "other computer"...

And realistically, I'd recommend getting a specialist to sort it out.
xplora @ undernet.org
Past Co-ordinator
Undernet Channel Services Committee

Slosser
Posts: 1

Post by Slosser »

I use Microsoft security essentials or malwarebytes free download to clean that machine. Make sure that you do a full scan in safe mode. Also if that doesn't work you may need to piggyback that drive to another machine and scan it that way.
I have a family of five and each of our little ones have loved this teether. Check out my new site http://www.giraffesophie.org