Have you ever had a malware infection on a computer you owned or worked on? If so, did you know what the malware actually DID while it was on your computer, or did you simply allow your antivirus software to remove the infected files without any further questions? Do you think it is important to understand what happened while the malware was on your system?

A detailed forensic investigation by a security professional can be more costly than allowing a first tier help desk IT technician run a virus scan on a computer. What factors would you weigh in deciding whether it is worth the extra money?