Assuming that rebooting the device did flush the worm (very doubtful), an IPS would help clear up the problem and would have helped prevent it in the first place. No need to modify the device itself. These days, I find it surprising that an IPS isn't standard network security equipment at hospitals.