A method for determining appropriate actions to remedy potential security lapses following infection of a device by malware. It is preferably realized as an indicator device or pointer, in particular as a registering pointer for instrument tracking systems. The receiver circuit preferably contains counters for counting test cycles and errors, which can be masked for any particular line or type of error. The network also includes a server.