A malware investigation finds that a browser extension is redirecting searches and injecting advertisements. What should be done within the organization's remediation procedure?

1. Remove the unapproved extension and check for related persistence or compromise
2. Delete only the desktop browser shortcut
3. Add the injected websites to the trusted-sites list
4. Disable the browser's security updates indefinitely