100-160 Question 163
Select 3A user reports that their computer is running slowly and behaving unusually. Upon investigation, you suspect malware infection. Which steps should you take to safely remove the malware?
- A
Disconnect the device from the network to prevent further spread or data exfiltration.
- B
Install a second antivirus program to immediately scan and delete the malware.
- C
Boot the system into Safe Mode to minimize the running of malicious processes.
- D
Run a full scan using an updated antivirus or antimalware tool.
- E
Delete all suspicious files manually from the system without prior analysis.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effective malware removal involves isolating the infected system to prevent the spread of malware, using Safe Mode to restrict malicious processes, and running a full scan with trusted security software. These steps ensure the malware is properly identified and removed without causing additional harm to the system.
- A. Correct.
Disconnecting the device from the network is a critical first step to prevent the malware from spreading or stealing sensitive data.
- B. Incorrect.
Installing a second antivirus program is not recommended as it can cause conflicts with the existing security software and may not effectively address the malware issue.
- C. Correct.
Booting into Safe Mode helps disable non-essential programs and services, including many types of malware, making it easier to remove the infection.
- D. Correct.
Running a full scan with updated antivirus or antimalware software is a standard and essential step for detecting and removing malware from the system.
- E. Incorrect.
Manually deleting files without analysis is risky and may lead to accidental deletion of legitimate files, further damaging the system.