Diagnose the Problem . Don't try to diagnose a security incident alone. Gather what information you can, but check with the Help Desk and other support sites, as well as within your college, to make sure you have all the facts. If the Internet is still accessible, check the UT home page to see if anything has been posted. It may be prudent to disconnect an affected machine from the campus network, but don't turn it off until you know what you're facing.
Some viruses cause further damage during the boot process.
Obviously, be careful not to trigger a virus on a system connected to the network or one that has useful information on its hard drive. Some viruses can disrupt firmware severely enough to make a system nearly unrecoverable. Moreover, avoid reading e-mail while logged in with a privileged account on a workstation or server. Conceivably, you could take down an entire facility by doing so. Notify, Isolate, and Protect . . .