F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 8.00 - Administrator's Manual - page 248
248
10.3 What to Do in Case of a Virus Outbreak?
This section contains a checklist of what you should do and remember in
case there is a virus outbreak in the company network.
1. Disconnect the infected computer from the network immediately.
If the infection keeps spreading, the whole network should be taken
down without delay. All outgoing traffic should be blocked. Employees
must be instructed to report suspicious activities on their computers
immediately.
2. Try to identify whether it is a real infection or a possible false alarm.
Scan the computer with the latest version of F-Secure Client Security
with the latest virus definitions updates. If the infection is identified
exactly, go to Step 3. If the infection is identified as a 'possible new
virus', 'could be an image of a boot sector virus' and so on, send a
sample together with the F-Secure Client Security scan report
through the Submit Malware Sample web tool at:
http://www.f-secure.com/samples
3. If it is a known infection, go to the F-Secure virus information pages
and get a description of the malware.
Download disinfection tools (if available) and print disinfection
instructions. In case disinfection assistance is needed, contact
Support through our support web page:
http://support.f-secure.com
If you need urgent assistance, please point it out in your message.
4. If it is a new virus, try to locate a sample and send it to F-Secure
Security Labs through the sample submission webform at:
http://www.f-secure.com/samples
Provide as much information about the problem as possible. It is
important to know how many computers are affected with the virus.
5. If a computer is infected with malware that spreads in the local
network, it is recommended to take down the network until all infected
computers are disinfected.
The network can be taken into use only after all computers are
cleaned because a single infected machine can re-infect the whole
network within minutes.