Virus notification procedures

Monash University receives many emails through its network connections every day, and despite the scanning of incoming email, the possibility of infection is always present.

In response to the potential threat this poses, ITS has developed a series of procedures that should be completed whenever a virus is detected or suspected.

• Level 1 : Local IT Representatives
• Level 2 : Security & Risk Section

Level 1 : Local IT Representatives

The local IT representatives are responsible for the identification of known or unknown viruses. When they receive notice of a potential virus, they should investigate using anti-virus software in conjunction with the web pages below, to identify the virus and then implement the solution recommended by ITS or the supplier.

• Monash Virus Alerts
• Sophos Virus information

If the virus is known, they should clean the virus up as per instructions, then send a 'notice of infection' to virus.alert@its.monash.edu.au.

Please do NOT send queries or unknown viruses to this address as they will not be processed.

If the virus is unknown, or a more general query is being made, the virus information or query should be lodged in HEAT with as much detail as possible.

Local IT Support representatives are expected to investigate unidentified viruses. They can do this by investigating the symptoms of the virus, using search engines and other online resources. Once they have found what they believe to be a sample of an infected executible file, this should be compressed into a zip archive and password protected.

This sample should then be send onto the virus alert email address listed above.

Incase of emergency, please call the Security hotline on x55428

Level 2 : Security & Risk Section

Security & Risk are responsible for the speedy resolution of unknown virus threats referred to it via HEAT, as well as the monitoring of known viruses throughout the university. Upon receiving the notice of a virus, they will then liaise with the Anti Virus software companies to get a solution as soon as possible.

The Security and Risk Group are responsible for the distribution of information on viruses. They will send out notices on unknown viruses and on prevalent known viruses to ICCT-L (formerly TWP) and/or the IT Security Forum. If it is a dangerous virus which has the potential to do a wide amount of damage to Monash systems, they can also recommend to the head of Client Services to have a University-wide notice sent out.

Please contact the ITS Service Desk if you have any queries about viruses.