A technician is remediating a Windows 11 workstation where an unapproved browser add-on causes persistent search engine redirects and fake pop-up alerts. Place the following remediation actions in the correct chronological order from first to last to resolve the browser hijacker.
- 1Terminate all active web browser instances and associated suspicious background processes.
- 2Remove unrecognized browser extensions and reset browser startup pages and search defaults.
- 3Audit and clean OS network configuration settings, including system proxy settings and the local hosts file.
- 4Execute a full anti-malware scan to detect and remove remaining malicious software packages.
- 5Verify browser security controls, ensure pop-up blockers are active, and test user browsing functionality.
Answer
The correct sequence of actions is: 1) Terminate active browser instances and suspicious background processes, 2) Remove unrecognized browser extensions and reset search/home page defaults, 3) Audit and clean system proxy settings and the hosts file, 4) Execute a full anti-malware scan, and 5) Verify browser security controls, pop-up blockers, and functionality.
The correct order begins by terminating active browser processes to isolate the system, followed by clearing malicious browser extensions and resetting default browser settings. Next, system-level redirection vectors (proxy settings and the hosts file) are inspected and restored. Afterwards, a full anti-malware scan purges persistent malware files. Finally, browser security controls are verified and functional testing confirms resolution.
Step-by-Step Solution
Key Concept
Browser Hijacker Remediation Sequence