Examkin

Question

Difficulty: EasyMalware Symptoms and Standard Removal Procedures

A desktop technician is following standard CompTIA procedures to remediate a malware infection on an enterprise workstation. Arrange the following steps of the malware removal process in the correct order from first to last.

  1. 1Disconnect the infected workstation from the network.
  2. 2Disable System Restore in Windows.
  3. 3Run anti-malware scans and removal tools to clean the system.
  4. 4Enable System Restore and create a new restore point.

Answer

The correct order of the malware remediation procedure is: Disconnect the infected workstation from the network, Disable System Restore in Windows, Run anti-malware scans and removal tools to clean the system, and Enable System Restore and create a new restore point.
Under standard CompTIA malware removal procedures, the technician must first isolate the system (disconnect network) to prevent lateral spread, disable System Restore to clear infected restore points, execute remediation tools to eliminate active malware, and finally re-enable System Restore and build a fresh restore point once the environment is clean.

Step-by-Step Solution

1
Isolate the infected machine from the environment.
Network communication is terminated, stopping potential lateral malware propagation.
Workstation isolation must occur immediately after identifying malware symptoms.
2
Disable System Restore.
Existing restore points containing malware are removed or locked from reinfecting the system.
Disabling restore functionality prevents malware from surviving remediation through system rollbacks.
3
Remediate the infected system using updated anti-malware utilities.
Malicious code and files are quarantined or deleted.
Remediation cleans active threats from local drives.
4
Re-enable System Restore and generate a clean restore point.
A clean recovery baseline is established for future system protection.
System Restore is re-enabled only after full remediation and system updates are complete.

Key Concept

CompTIA 7-Step Malware Removal Process
Rate this question

Topics

Malware Symptoms and Standard Removal Procedures

More questions from this topic