A user's machine has been infected with a virus. After running a scan, the threat was unable to be removed completely. The system contains licensed applications, so a re-image is the last resort. The NEXT step the technician should take is:
boot into safe mode and run the antivirus scan again.