Domain 3 of 4 · Chapter 3 of 3

Security Issue Remediation

Unlock the complete study guide + 1,040 practice questions across 16 full exams.

Bundled into the existing CompTIA A+ Core 2 premium course — no separate purchase.

14-day money-back guarantee — no questions asked.

Included in this chapter:

  • Reading a security symptom
  • Desktop and OS symptoms of unauthorized access
  • Browser symptoms: hijack, redirects, and certs
  • The browser hardening and remediation workflow
  • When a reset is not enough: escalate removal
  • Exam-pattern recognition

Three lookalike alerts and how to respond

TraitRogue AV / scarewareReal antivirus detectionBrowser certificate warning
Where it comes fromA web pop-up or injected pageYour installed endpoint protectionThe browser's TLS certificate check
Typical wording'Your PC is infected, call/pay now'Threat found and quarantined'Your connection is not private', cert error
What it really meansSocial engineering; no real scan ranA genuine detection to act onCert expired, self-signed, name mismatch, or interception
Right first responseClose via Task Manager; never call or payLet it quarantine, then verify and rescanCheck the clock and cert; do not bypass on a login site
Escalate to structured removal?Only if a payload actually ranYes if detections keep returningNo, unless paired with hosts or proxy tampering

Decision tree

Payload, disabled security tool, or infection spreading? Yes Structured malware removal procedure No Symptom confined to the browser? Yes Browser remediation workflow No Reversible in place (re-enable a tool, end one process)? Yes Targeted OS fix, then rescan No Escalate to malware removal

Cheat sheet

  • Match the remediation to the symptom, not your worst fear
  • Treat a pay-or-call infection pop-up as scareware, not a scan
  • Tell a real antivirus alert from scareware by its source
  • A browser hijacker reroutes traffic by rewriting your defaults
  • The hosts file overrides DNS, so malware edits it to redirect you
  • A rogue proxy or DNS setting redirects every browser at once
  • A certificate warning names its reason, so read it before reacting
  • Judge a certificate warning by the site it appears on
  • A disabled Task Manager or regedit is a symptom, not a glitch
  • An unexpected UAC prompt, or UAC switched off, is a red flag
  • Trace a rogue process by its odd path and idle-time network use
  • Repeated lockouts point at a replayed credential, so reset it
  • Run the browser remediation steps in order so no redirect survives
  • Sign out of sync before resetting, or the hijacker returns
  • Reset exposed passwords from a device you know is clean
  • Reinstall only from trusted, secure sources to stop reinfection
  • Match the fix to the scope: one site gets the pop-up blocker
  • Persistence or spread escalates to removal, quarantine first
  • Microsoft Safety Scanner expires ten days after you download it
  • A yellow Windows Security status is a recommendation; a red X means protection is off

Unlock with Premium — includes all practice exams and the complete study guide.

References

  1. CompTIA A+ Core 2 (220-1202) Certification Exam Objectives (V15, Document Version 3.0)
  2. netstat command reference
  3. tasklist command reference
  4. How User Account Control works
  5. File encryption (Encrypting File System)