What is the first step you should perform according to the best practices for malware removal?

A identify and research malware symptoms

explanation

Identify and research malware symptoms; quarantine infected systems; disable system restore; remediate infected systems; schedule scans and run updates; enable system reconstruction; educate the end-user are the recommended practices for malware removal.