A technician responds to a call from a user who claims to have a virus on a workstation. The technician observes the following notification from the system tray:
There are 1033 infected files on this computer. Click here to disinfect.
Which of the following should the technician complete to secure the computer with MINIMAL impact to the user?
- Compare the startup items and services to a known clean image, and remove any startup items not found in the other image. Run an anti-malware scan.
- Validate that the alerts are false positives, and disable security software on the workstation to prevent further false notifications.
- Back up the user’s files. Restore the system to the original system image designated by corporate IT policies. Restore the user’s files.
- Request a content filter exception to allow access to the link from the notification. Once available, follow the instructions on the linked site.