Examkin

Question

Difficulty: HardWeb Browser Security and Pop-Up/Redirect Troubleshooting

A help desk technician is responding to a ticket where a user's web browser consistently opens to a rogue search engine upon startup, and intrusive advertisement pop-ups appear periodically. The technician suspects a browser hijacker that modified shortcut parameters and installed a malicious extension. In what sequence should the technician perform the following steps to remediate the browser redirect and pop-up issue?

  1. 1Disconnect the workstation from the local network to isolate it from potential command-and-control servers.
  2. 2Inspect browser shortcut properties to remove injected URL arguments and uninstall unauthorized extensions.
  3. 3Reset browser security settings to default configurations and clear all cached web content and cookies.
  4. 4Execute a full anti-malware scan of the local system using updated signature definitions.
  5. 5Reconnect the workstation to the network and verify proper browser operation and redirect-free navigation.

Answer

The correct sequence of steps is: 1) Disconnect the workstation from the local network; 2) Inspect browser shortcut properties to remove injected URL arguments and uninstall unauthorized extensions; 3) Reset browser security settings to default configurations and clear all cached web content and cookies; 4) Execute a full anti-malware scan of the local system; 5) Reconnect the workstation to the network and verify proper browser operation.
The correct order follows standard CompTIA malware and browser troubleshooting protocols: first isolate the system from the network to contain the threat; second, remove active browser hijacker components (shortcut target overrides and rogue extensions); third, reset browser settings and clear residual cached data and unauthorized notification permissions; fourth, run a comprehensive system anti-malware scan to clean OS-level artifacts; and fifth, restore network connectivity and verify resolution.

Step-by-Step Solution

1
Isolate the infected machine from the network.
Prevents active malicious extensions or scripts from transmitting data or downloading additional payloads.
Following malware remediation procedures, isolation is always the immediate first step upon identifying a compromise.
2
Remove malicious shortcut parameters and rogue extensions.
Eliminates the immediate cause of forced URL redirects and unwanted pop-up behavior.
Directly targets the active injection vectors within the browser environment while disconnected.
3
Reset browser settings and clear browser data/cache.
Restores original security defaults, removes unauthorized push notification permissions, and clears malicious cookies/cache.
Ensures no residual persistent browser state or pop-up permissions remain.
4
Run a full system anti-malware scan.
Detects and removes any OS-level malware components, scheduled tasks, or persistent registry keys.
Guarantees the system is clean beyond just the browser profile before restoring network access.
5
Reconnect to the network and verify functionality.
Confirms that redirects are gone and browser security settings remain intact during live web browsing.
Final verification step ensures successful remediation under normal operating conditions.

Key Concept

Browser Hijacker Remediation and Malware Best Practices
Rate this question

Topics

Web Browser Security and Pop-Up/Redirect Troubleshooting

More questions from this topic