Malware removal workflow.
Build a response plan that contains the incident and returns a small-office PC to service.
“The browser keeps redirecting.”
A user reports persistent browser redirects, unexpected security pop-ups, and a slowdown after installing a free invoice converter. The workstation still has access to office file shares. No technician has assessed the report yet.
The owner has authorized routine malware remediation and wants a trustworthy, working workstation returned to the user. Select nine appropriate actions and arrange them in a safe operational sequence. Some proposed actions do not belong in this response.
Support context
A verified backup of business documents is available. Approved OS installation media and the vendor's offline security updates are on hand. No legal hold or evidence-preservation requirement applies. Reinstallation is authorized if removal cannot establish a trusted system.
Add actions to your plan. Drag to reorder, or use the Move up / Move down buttons.
Action bank
Shuffled actions. Scroll within the bank to view all choices.
Your response plan
0 / 9 actionsTop to bottom represents the order of execution.
Only the saved workflow is graded. No correctness indicators appear before submission.
No workflow saved.
Nine equally weighted workflow objectives. Credit requires an appropriate action with its prerequisite actions before it. Incorrect actions earn no credit.
Review an accepted workflow
Operational verification may occur anywhere after remediation and before user handover. This exercise accepts that variation; the scan schedule precedes the new restore point.
Aligned to CompTIA A+ 220-1202 objective 2.6. This is an original scenario, not an exam item.