All Windows 10 computers in a small advertising company are configured with the System Restore service. One of the PCs was infected by malware when an employee was doing research on the internet. The IT administrator scans the system and deletes the malware from the Quarantined Items folder. What should the administrator do next to complete the remediation process?
- Create a restore point.
- Delete all restore points.
- Disable the System Restore service.
- Restore the system from a backup.
Explanation & Hint:
Once the System Restore service is turned on, a PC will create regular restore points. When the PC is infected with malware, the system restore points may contain infected files. Deleting all system restore points after the system has been remediated, prevents bringing infected files into the system when the System Restore service is needed. |