A user calls the help desk to report potential malware on a computer. The anomalous activity began after the user clicked a link to a free gift card in a recent email. The technician asks the user to describe any unusual activity, such as slow performance, excessive pop-ups, and browser redirections. Which of the following should the technician do NEXT?


A. Advise the user to run a complete system scan using the OS anti-malware application.
B. Guide the user to reboot the machine into safe mode and verify whether the anomalous activities are still present.
C. Have the user check for recently installed applications and outline those installed since the link in the email was clicked.
D. Instruct the user to disconnect the Ethernet connection to the corporate network.