Traffic anomalies consist of higher than normal concentration (almost always Denial of Service type) traffic against one or more than one port or host.
Malware can be difficult to identify or remove, even when using anti-virus software. Hosts suspected of this activity should be removed from the network and checked for signs of compromise. These types of incidents could be considered service affecting in some cases. Service affecting network activity is and will be mitigated by network operational staff.