A technician is preparing to troubleshoot a Windows workstation exhibiting severe pop-up advertisements and browser redirects. Following standard CompTIA malware removal procedures, which of the following actions should the technician take PRIOR to executing anti-malware remediation tools? (Select TWO.)
- Disconnect the workstation from all wired and wireless network connections.Answer
- Disable System Restore within the operating system options.Answer
- CEnable System Restore and generate a new baseline restore point.
- DProvide security awareness training to the primary workstation user.
Answer
Disconnecting the workstation from all network connections and disabling System Restore are the required steps to complete prior to running malware remediation tools.
According to standard malware removal procedures, system isolation (unplugging network cables / turning off Wi-Fi) and disabling System Restore must take place before anti-malware tools remediate the system. Disconnecting network access prevents malware spread, while disabling System Restore purged infected restore points.
Step-by-Step Solution
Key Concept
CompTIA 7-Step Malware Removal Procedure (Isolation and Pre-remediation Steps)