Question

A technician has identified malware on a workstation, verified the symptoms, and disconnected it from the network. System Restore has been disabled and antivirus definitions have been updated. According to CompTIA's best-practice malware removal process, what is the technician's NEXT action?

Accepted Answer

Scan for and remove the malware using anti-malware tools, quarantining infected files

Answer

Educate the end user about safe browsing and email habits

Answer

Re-enable System Restore and create a fresh restore point

Answer

Schedule automatic scans and updates to run going forward