220-1202 · Question #79
A user's workstation was infected with a newly discovered virus that the AV system detected. After a full virus scan and a workstation reboot, the virus is still present in the OS. Which of the…
The correct answer is B. Use bootable antivirus media to scan the system. If a newly discovered, persistent virus cannot be removed by an active antivirus scan, using bootable antivirus media is the most effective next step to disinfect the system.
Question
A user's workstation was infected with a newly discovered virus that the AV system detected. After a full virus scan and a workstation reboot, the virus is still present in the OS. Which of the following actions should the user take to remove the virus?
Options
- AEnable the system firewall.
- BUse bootable antivirus media to scan the system.
- CDownload software designed to specifically target the virus.
- DRun the operating system update process.
How the community answered
(25 responses)- A8% (2)
- B68% (17)
- C20% (5)
- D4% (1)
Why each option
If a newly discovered, persistent virus cannot be removed by an active antivirus scan, using bootable antivirus media is the most effective next step to disinfect the system.
Enabling the system firewall helps control network access but does not actively remove an existing virus from the local system.
When a virus persists after a scan and reboot, it often means the malware is active or embedded within the operating system, preventing its removal by the running antivirus. Booting the system from external, bootable antivirus media allows the scan to run from a clean environment, ensuring the virus is not active or interfering during the detection and removal process.
Downloading software on an infected system is risky, as the virus could potentially interfere with the download, installation, or compromise the new software itself.
Running operating system updates primarily addresses security vulnerabilities and bugs, but it does not directly remove an active and persistent virus infection.
Concept tested: Malware removal and system disinfection
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-offline/windows-defender-offline
Topics
Community Discussion
No community discussion yet for this question.