You can never assume a scenario, only go by what the text says. It says the virus was removed so assume it was removed.

A makes sense, since it says a week before, meaning there are days that the symptoms didn't appear, computer works fine. Then user might have done something again to make the symptoms recur

The user obviously clicked on something he's not supposed to and got another malware infection...

The question was good but still a little vague for someone who understands that C could cause the issue too. But otherwise A makes sense. At the same time though how do we tell he did educate the user or forgot to disable system restore?. Maybe the customer was careless or forgot the training as this happens over a extended period. Which then does point to A because it would take longer than a week for a end user to forget enough in most cases to repeat the same error in such a short time.

I believed it was C however the way i see it, if C was the right answer it would imply the technician was incompetent and didnt do his job properly and im sure that is not what they would imply..... but like i said thats how i see it

A by a longshot, in my opinion. It's just really likely you forgot to tell him what not to click on to give him a virus then all of those other complicated things.

I think it is C. Considering that many of the "same" virus symptoms came back indicates a high possibility that the virus was saved in the system restore. That means the technician forgot to disable the system restore.

I thought it was C. doesn't say anywhere that Joe was the reason for the Malware returning. It could have been due to not disabling system restore....

Well, I strongly believe ans should be C.