Do you think your company computer has been compromised?

Typical steps:

– disconnect the network cable

– do NOT logon or turn off the system (this could destroy important evidence)

– contact Cyber-911 for CERT service