Help! Someone's running an irc server on my connection...

… and I don’t know what it means.

If this is what I suspect it is, I’m gonna be pissed.

I find out a friend has been using my DSL account to host something, I don’t know. I hook up a new computer to that setup and a day later the thing has ten viruses-- all irc related (Whatever that means).

I don’t have access to the computers he’s set up on my line, but I assume the viruses are coming from his machines and not mine.

Is that a stupid conclusion, or does it make sense?

Further, do I assume he’s been using my connection to host an irc channel, or am I going overboard.

If he has been, or is, running and irc channel on my connection, what the heck does that mean?

Sorry, but alot of this doesn’t make sense.

a) If he has other machines on your lan, they aren’t any more able to infect you then a machine on the internet.

b) If you have a virus contracted via irc, it happened because you were running an irc client and downloaded something, like a mirc script or something that did something wicked.

c) If he’s hosting an irc daemon, that may use a bunch of your bandwidth. But hosting an irc channel doesn’t actually happen on your lan. it’s hosted out in the internet on some server on the irc network he’s on. In either case, that won’t impact your computer.

How did you find out you were infected, and who said they were “irc related”?

On second glance, my #a isn’t purely true. If you are behind a nat firewall (likely), and he brought a computer onto your lan which was already infected, it could be more likely to infect you then an attacker from the internet.

He’s probably running an IRC bot in order to make pirated or other software available to IRC users. Try trojan removal software such as The Cleaner. Pull the network connections from all computers, clean them individual, and reconnect only when they’re secure. Any systems you can’t secure should be left disconnected.