Just curious what you guys do for response when you receive a virus alert from your AV software. We use McAfee and get alerts for both when a virus is found and removed and when one is found and not removed.
Typically if it is removed we check with ePO to verify they current definitions and that is about it.
If it was not removed we reach out to the user and let them know we need to take over there PC and run an AV scan – clear out their temp files and then have them reset their password. If the scan comes back clean we move on. If not we usually reimage their machine.
Just looking to get some feedback on what the smart people are doing when a virus is found.