Procedure following discovery of a virus on a computer attached to ResNet.
Through the Intrusion Detection System and other network monitoring we perform, we may notice a virus-infected computer on the network via its attempts to infect other systems.
This procedure is followed in such cases.
- We disable the network connection for the infected system immediately to prevent the virus spreading and protect other network users.
- We notify the user concerned by email that their computer is infected by a virus and has been disconnected. They can still access their email and other computing facilities in the public computer rooms around the School.
- The infected device must be delivered to the House Staff for collection by ICT Services. No replacement device will be provided. The devices will be then sanitised by ICT Services. Where possible every effort will be made to back up and/or recover essential data, however this cannot be guaranteed. It is expected that the device will not be available to the user for at least 16 working hours.
Persistent offenders.
For persistent offenders and with due authority a reconnection fee of £25 may be levied before a previously virus-infected system is reconnected to ResNet.
This fee is a contribution to the cost of the work caused by each virus infection. It also acts as a deterrent to encourage users to secure their computers. The fee will be recovered by the Account Department.
Once the reconnection fee has been paid, the offenders connection will be reestablished within 2 working hours.
