A technician discovers a PC has a virus on it. Which of the following should the technician do to remediate this?

Question

Options

• ACreate a system restore check point, run antivirus software, and create another check point when
• BDisable system restore, run antivirus software, and re-enable system restore when the PC is
• CCreate a system image, run antivirus software, reboot the PC, and restore the system image
• DRun antivirus software, reboot the PC, and create a system restore checkpoint when the PC is

• A
  13% (6)
• B
  79% (37)
• C
  2% (1)
• D
  6% (3)

Explanation

The correct malware remediation procedure requires disabling System Restore first, then running antivirus software, and finally re-enabling System Restore once the PC is confirmed clean. System Restore must be disabled because its protected snapshots can harbor copies of malware. If it remains on during scanning, antivirus tools cannot reach or delete the infected restore point files, allowing the malware to survive and potentially reinfect the system. Once the antivirus confirms the system is clean, System Restore is re-enabled and a fresh, uninfected restore point is created as a safe recovery baseline.

No community discussion yet for this question.