220-902 – Q198

A technician has cleaned a virus infection off of a PC using corporate approved software. After a short period of time, the infection returned. Updated virus signatures have also detected the presence of a rootkit. Which of the following would be the BEST course of action to resolve the issue?

A. Run a System Restore to a time before the first infection was cleaned.
B. Install a second antivirus suite and run both antivirus products concurrently.
C. Back up the client’s data and scan it for infections on a known-working PC.
D. Reformat the hard drive and reload the operation system and applications

Correct Answer: A