A Technician Receives the Chief Executive Officer's (CEO's) Windows 10

A technician receives the Chief Executive Officer's (CEO's) Windows 10 laptop, which has been infected with malware. The technician wants to make sure best practices are followed for troubleshooting and remediating the malware. Which of the following best practices should the technician perform FIRST in this scenario? (Choose three.)

A) Disconnect the device from the network
B) Identify and research the symptoms
C) Restore the computer to the previous checkpoint
D) Scan and use removal techniques
E) Create a restore point
F) Educate the end user
G) Schedule scans and run updates