220-1002 · Question #716
A technician is removing a virus from a user's Windows workstation. The virus was installed by the user while downloading pirated software from the Internet. Which of the following should the…
The correct answer is D. Update and run an antivirus scanning utility to remove the threat. Launch explorer.exe using. When removing a virus from a Windows workstation, the technician should first update and run an antivirus utility to eliminate the threat before relaunching any system processes.
Question
A technician is removing a virus from a user's Windows workstation. The virus was installed by the user while downloading pirated software from the Internet. Which of the following should the technician do to address this issue?
Options
- AEnd the current explorer.exe task. Update and run an antivirus scanning utility to remove the
- BEnd the current explorer.exe task using the command line. Update and run an antivirus
- CLaunch explorer.exe using Task Manager. Update and run an antivirus scanning utility to
- DUpdate and run an antivirus scanning utility to remove the threat. Launch explorer.exe using
How the community answered
(67 responses)- A3% (2)
- B6% (4)
- C10% (7)
- D81% (54)
Why each option
When removing a virus from a Windows workstation, the technician should first update and run an antivirus utility to eliminate the threat before relaunching any system processes.
Ending explorer.exe before running antivirus is unnecessarily disruptive - it kills the Windows shell without first addressing the active threat, which is the primary remediation goal.
Using the command line to end explorer.exe adds complexity without benefit, and terminating the shell before cleaning the malware still does not follow the correct remediation order.
Launching explorer.exe before running the antivirus scan attempts to restore the shell while the virus may still be active, potentially allowing the malware to persist or spread further.
The correct remediation sequence is to update antivirus definitions to ensure the latest threat signatures are available, then run the scan to remove the active infection. Relaunching explorer.exe after cleanup restores the Windows shell if it was disrupted, ensuring the system is in a clean state before re-engaging user-facing processes.
Concept tested: Malware removal procedure and remediation sequence
Source: https://support.microsoft.com/en-us/windows/protect-my-pc-from-viruses-b2025ed1-02d5-1e87-ba5f-71999008e026
Topics
Community Discussion
No community discussion yet for this question.