3.4 Given a scenario, troubleshoot common personal computer (PC) security issues.
📘CompTIA A+ Core 2 (220-1202)
When troubleshooting PC security issues, it’s important to recognize the symptoms first. Symptoms are the signs that something may be wrong with the computer’s security or system integrity. Identifying these symptoms helps you take the right steps to fix the problem.
Here are the common symptoms you need to know:
1. Unable to Access the Network
- What it means: The computer cannot connect to the internet or other network resources.
- Possible causes related to security:
- Malware or viruses blocking network access.
- Firewall or antivirus software incorrectly blocking connections.
- Network configuration changes caused by malicious software.
- How to detect:
- Check if other devices on the network can access the internet.
- Use
pingortraceroutecommands to test connectivity.
- Example in IT environment: A company PC cannot reach internal servers because malware has changed DNS settings, preventing access to critical network resources.
2. Desktop Alerts
- What it means: Pop-up notifications appear on the desktop warning about security issues.
- Possible causes:
- Genuine antivirus or Windows Security alerts.
- Fake alerts from malware pretending to be antivirus software.
- How to detect:
- Check the source of the alert (legitimate security software vs. unknown program).
- Verify alerts in the security software dashboard, not just pop-ups.
- IT environment example: Security software alerts that virus definitions are out-of-date, or a rogue program shows a fake “virus detected” warning.
3. False Alerts Regarding Antivirus Protection
- What it means: Antivirus programs give warnings even though there is no actual threat.
- Possible causes:
- Malware may disable antivirus or fake alerts to trick the user.
- Corrupted antivirus installation.
- Misconfigured security settings.
- How to detect:
- Run a scan using a second trusted antivirus tool.
- Check antivirus software logs for errors.
- IT example: A workstation shows “antivirus disabled” even though the software is running normally; this could indicate malware interference.
4. Altered System or Personal Files
This includes two common issues:
a) Missing or Renamed Files
- What it means: Files have disappeared or their names have been changed unexpectedly.
- Possible causes:
- Malware, such as ransomware, renaming or encrypting files.
- Accidental deletion or user errors (but often security-related if sudden).
- Detection:
- Check system logs or backup software to see file changes.
- Look for unusual file extensions (e.g.,
.locked,.crypt).
b) Inability to Access Files
- What it means: Files exist but cannot be opened or accessed.
- Possible causes:
- Ransomware or malware restricting access.
- Permissions changes by malicious software.
- IT example: A document folder cannot be opened because ransomware encrypted files, preventing access until a decryption key is provided.
5. Unwanted Notifications Within the OS
- What it means: Frequent, unexpected pop-ups or messages appear in Windows or the OS itself.
- Possible causes:
- Adware or spyware installed on the system.
- Malicious extensions or programs creating fake messages.
- How to detect:
- Check installed programs or browser extensions for suspicious items.
- Use Task Manager to identify unknown processes.
- IT example: Pop-ups appear on the login screen or desktop, prompting users to download software they didn’t request.
6. OS Update Failures
- What it means: The operating system cannot install updates successfully.
- Possible causes:
- Malware interfering with system files needed for updates.
- Corrupted system files.
- Security settings blocking updates.
- How to detect:
- Check the Windows Update log or system error messages.
- Run system file checks (e.g.,
sfc /scannowin Windows).
- IT example: Windows Update repeatedly fails with error codes because a virus altered system update components.
Summary Table of Common Symptoms
| Symptom | Meaning / IT Indicator |
|---|---|
| Unable to access the network | Malware or firewall blocking connections |
| Desktop alerts | Security notifications; could be fake alerts |
| False antivirus alerts | Malware interference or corrupted antivirus |
| Altered/missing/renamed files | Ransomware or malicious activity affecting data |
| Inability to access files | Permissions changed or files encrypted by malware |
| Unwanted OS notifications | Adware or spyware generating pop-ups |
| OS update failures | Malware blocking updates or system files corrupted |
✅ Exam Tips
- Know that malware often causes multiple symptoms at once, such as pop-ups plus missing files.
- Focus on how to detect and confirm the issue (logs, antivirus scans, system checks).
- Remember the difference between real alerts vs. fake alerts.
- Be familiar with common signs of ransomware and spyware, as these are often mentioned in exam questions.
