Some additional thoughts.
From memory, when my PC was infected it was bypassing squid and going
direct. (My PC was allowed through the firewall for testing) The
malware was looking for other sites to infect using Google. As google
are already blocking your access I would start looking at your
firewall. Log all requests to port 80 and look for the PC/s that are
trying to access google constantly. This showed up pretty quick when
I was infected. I chose to rebuild my PC.
Hope this helps.
2009/1/16 Mark Barlow <squid.users.mailing.list_at_googlemail.com>:
> MALWARE ALERT!!!!!
> I had this, my PC was infected by a drive by download from an innocent site.
>
> 2009/1/16 jeff donovan <donovan_at_beth.k12.pa.us>:
>> Greetings
>>
>> I am running two squid boxes as content filters for a number of schools.
>> Google has recently changed and we are now getting a " Sorry you look like a
>> botnet "
>> We're sorry...
>> ... but your query looks similar to automated requests from a computer virus
>> or spyware application. To protect our users, we can't process your request
>> right now.
>> We'll restore your access as quickly as possible, so try again soon. In the
>> meantime, if you suspect that your computer or network has been infected,
>> you might want to run a virus checker or spyware remover to make sure that
>> your systems are free of viruses and other spurious software.
>>
>> from what I can tell. too many searches from one IP address.
>> I have been running this way for years.
>>
>> is there anything I can do to have squid give out more than one ip address?
>> or is there some tweek that I can perform to make this error go away?
>>
>>
>> thanks
>>
>> -jeff
>>
>
Received on Fri Jan 16 2009 - 16:21:26 MST
This archive was generated by hypermail 2.2.0 : Sat Jan 17 2009 - 12:00:02 MST