Exam 220-1102 topic 1 question 183 discussion

B. Educating the user will most likely help to permanently remove the malware. The user may be engaging in risky behavior, such as visiting unsafe websites or opening suspicious emails, that is causing the system to become re-infected with malware. By educating the user on safe computing practices, the technician can help prevent future infections. NOTE: Notice how it says the "user" reboots the system and NOT the "technician". The users action and p*rn addiction is causing this!

If the user's system is repeatedly infected with malware even after the anti-malware software has been updated and a scan has been run to remove the malware, it's possible that there are still malicious files or processes running on the system. In this case, the most likely solution for permanently removing the malware is to boot the system into safe mode and run a deep scan to identify and remove any remaining malicious files. Educating the user and scheduling regular scans can help to prevent future malware infections, but it may not be sufficient for removing existing malware.

I swear some of you are actually illiterate. It got immediately reinfected upon reboot, how is educating the user going to stop that from happening? This is clearly a case of malware detecting itself being uninstalled and reinstalling on reboot. If you run in safe mode it would prevent the malware from being active and not let it reinstall.

C. Booting into safe mode. Booting into safe mode loads only the essential system files and drivers, which can prevent the malware from running. This allows the anti-malware software to effectively detect and remove the malware without it being reactivated upon reboot.

The answer is C. Safe mode can also be used to remove rogue security software.

This is because malware often comes from unsafe browsing habits or opening suspicious emails.

Hate this question. Why does it say "user reboots system" and "again becomes infected". This either implies the user reinstalled the software that created the problem or the problem wasn't solved in the first place. Pending on the way you understand the message changes the answer and that what leads to yet another 50/50 vote.

Comptia A+ malware removal steps mention: 1.) Identify infected devices. 2.) Quarantine the devices. 3.) Disable System Restore. 4.) Remove the Malware. 5.) Setup scheduled scans and updates. 6.) Re-enable System Restore and create a restore point. 7.) Educate the user. C. Booting into safe mode could be correct, but it sounds like a means to an end. The problem is still around. A. Enable System Restore sounds like it matches the Malware Removal process so that's what I'm going with, but it's hard to say.

Sorry folks, B is a bad answer. How is educating the user going to remove malware?

According to Professor Messer In those cases, you should boot into Safe Mode

Question is which option will most likely HELP to permanently remove the the malware. Safe mode is an alternate boot method that makes it easier to diagnose and remove malware infection. Educating the end user won't help to remove the malware unless you teach him how to remove the malware.

Booting into safe mode ?? then what ?? take a picture with black screen ? uncomplete choises ...):

booting into safe mode is only thing that makes sense to me