100-160 Question 165
Select 3A user reports that their computer is running unusually slow, and you suspect malware might be responsible. After isolating the machine from the network, what steps should you take to remove the malware effectively?
- A
Run a full system scan using up-to-date antivirus software in Safe Mode.
- B
Delete all system files that seem suspicious without verifying their purpose.
- C
Research the symptoms and any detected malware to identify manual removal instructions.
- D
Restore the system to a previous backup point where it was functioning normally.
- E
Disable system restore to prevent malware from persisting through reboots.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effective malware removal involves a combination of automated and manual methods. Running a full system scan in Safe Mode ensures thorough detection and removal of malware. Researching the threat can provide additional insights for manual removal if necessary. Restoring to a clean backup is another reliable method to return the system to a safe state. However, actions like indiscriminate deletion of system files or disabling system restore can cause more harm than good.
- A. Correct.
Running a full system scan in Safe Mode is a critical step as it allows antivirus software to operate without interference from active malware.
- B. Incorrect.
Deleting system files without verifying their purpose is risky and can lead to system instability or data loss. This is not a recommended step.
- C. Correct.
Researching the symptoms and identified malware helps in understanding the threat and determining specific removal instructions if automated tools fail.
- D. Correct.
Restoring the system to a previous backup point where it was functioning normally can effectively remove malware if the backup is clean.
- E. Incorrect.
Disabling system restore is not recommended as it removes a potentially useful recovery option. Instead, ensure the restore points are clean if needed.