ITGSS Certified Technology Specialist

What is the recommended immediate action when antivirus software detects a virus on a workplace PC?

1. Run a full system scan

2. Delete all files

3. Disconnection of the PC from networks

4. Update antivirus software

The correct answer is: Disconnection of the PC from networks

The recommended immediate action when antivirus software detects a virus on a workplace PC is to disconnect the PC from networks. This step is crucial because it helps to prevent the potential spread of the virus to other devices and systems connected to the same network. By isolating the infected machine, you minimize risks such as data loss, further infection, or unauthorized access to sensitive information. Disconnecting the PC ensures that malicious software cannot communicate with external servers, receive commands, or propagate through the network. It serves as a proactive measure to contain the threat before any cleanup or remediation steps, such as running a full system scan or updating the antivirus software, can be carried out. This initial isolation is a standard security protocol in response to malware detection in a workplace environment. Choosing to run a full system scan, delete all files, or update antivirus software are critical steps in addressing the infection, but they do not carry the same immediate urgency as isolating the affected device. These actions should follow after ensuring the immediate threat has been contained through disconnection from any networks.