The following document pertains to computers which have been identified by the Networks team as being compromised and/or infected with malware.
First steps:
If you have discovered your computer is infected, immediately disconnect it from all networks to prevent it spreading from device to device. Second, ensure you have changed your passwords for online accounts on a separate device such as a mobile phone or lab computer. If the device is infected and you attempt to update your password on it, they have the ability to get the new password.
For university-owned PCs:
The PC will also be disabled from the network until the virus has been removed. The system can be brought into Tech Support so we can attempt to remove the virus. If we are unsuccessful, we will be required to format the system and reload it. In this case, we cannot guarantee that all the data would be preserved. We can also reinstall most University software that was previously on the system. If you think your system is infected, please submit a malware report.