IT Service Desk, Network Security, How to Remove Wi-Fi Blocks
Understanding the Issue
Security blocks on the IllinoisNet wireless network are typically implemented when a device is detected sending spam emails or exhibiting other suspicious or malicious network activity. This can be caused by:
- Malicious software (malware).
- Free VPNs or region-block bypass software.
- Internet sharing services.
- Questionable or suspicious software.
- macOS-specific spam malware.
When detected, the Office of Privacy and Information Security automatically blocks access to IllinoisNet until the issue is resolved.
Common Problematic Software
Free VPNs and internet-sharing services that often trigger security blocks include:
- Hola VPN.
- Urban VPN.
- Honeygain network sharing.
- EagleGet.
- Other free VPN services.
- Proxy bypass programs.
These applications typically:
- Route other users' internet traffic through your device.
- Send spam messages without your knowledge.
- Lack proper encryption, exposing personal information.
- Result in university networks being flagged as spam sources.
Required Actions
Before the offending device will be allowed to connect to the IllinoisNet Wi-Fi network again:
- Identify and remove the problematic software.
- Run a full system antivirus scan. "Quick" scans may not be accepted.
- MalwareBytes or Windows Defender are commonly used and accepted antivirus programs.
- Take a screenshot or photo of the completed antivirus scan, including any detections or quarantined items.
- Contact the IT Service Desk by submitting a ticket or emailing consult@illinois.edu
- Attach the screenshot or photo you took of the antivirus scan results to your correspondence with the IT Service Desk.
- Agree not to reinstall any problematic applications.
When the IT Service Desk receives your ticket, we will review the reason your device was blocked and if the antivirus scan is sufficient to unblock the device.
Note: Severe infections or infractions will not be unblocked with only an antivirus scan, and will require your device to be reimaged. Repeated blocks will also require your device to be reimaged.
Removing Unwanted Software
For Windows Users
- Open the Windows Settings.
- Navigate to Apps, then Installed Apps.
- Locate and uninstall the suspicious software. The names of several different free VPN or internet-sharing applications can be found under Common Problematic Software.
For Mac Users
- Force quit any suspicious applications:
- Press Command+Option+Escape to open the Force Quit Application menu.
- Look for unfamiliar or suspicious applications in the list.
- If found, select the app and press Force Quit.
- Uninstall the problematic application(s):
- Open the Finder and navigate to Applications.
- Click and drag the suspicious application to the trash.
- Empty the trash.
- For the known macOS spam malware:
Common Questions
Why Was I Blocked?
Malware poses a threat to:
- Your personal device and information.
- Other users on the campus network.
- The university's network reputation.
Security will block Wi-Fi access until the device is verified as malware-free.
I Never Installed Any Free VPN or Internet Sharing Software.
Network blocks are not exclusively issued for P2P VPN or internset sharing traffic. Any network traffic deemed as dangerous or unwanted can result in a block. Some common ways malware can end up on your device include:
- Applications installed by another user of your device.
- Software bundled with other applications you downloaded.
- Malware that installed without your knowledge, such as via fake CAPTCHA attacks: Fake CAPTCHA scams.
- Web browser extensions: How to Remove Suspicious Browser Extensions.
- Other applications that use similar technology, such as port scanning software.