A technician identifies that a Windows computer is infected with malware. Arrange the following steps of the standard CompTIA malware removal procedure in the correct sequential order from first to last.
- 1Disconnect the computer from the local network and disable wireless connections.
- 2Turn off System Restore in Windows to remove existing restore points.
- 3Update the anti-malware signatures and perform a full system scan.
- 4Enable System Restore and create a clean restore point.
Answer
The correct sequence of steps is: 1) Disconnect the computer from the local network and disable wireless connections, 2) Turn off System Restore in Windows to remove existing restore points, 3) Update the anti-malware signatures and perform a full system scan, and 4) Enable System Restore and create a clean restore point.
According to CompTIA's standard 7-step malware removal procedure, isolation of the infected system must occur first (Step 2) to stop the spread of infection. Disabling System Restore follows (Step 3) to clear infected restore points. Next, remediation occurs by updating anti-malware definitions and running scans (Step 4). Finally, System Restore is re-enabled and a clean restore point is created (Step 6) after verifying system cleanliness.
Step-by-Step Solution
Key Concept
CompTIA 7-Step Malware Removal Process