Anti Virus Solutions That Use Their Own Boot CD?

Anti Virus Solutions That Use Their Own Boot CD?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Anti Virus Solutions That Use Their Own Boot CD? Will 07-02-2008
Posted by Will on July 2, 2008, 1:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Can someone recommend an anti-virus solution that lets you build a boot CD
that will inspect the NTFS file system for trojans or viruses without any
need to boot the OS on the file system you are inspecting?

--
Will



Posted by Doug McIntyre on July 2, 2008, 3:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>Can someone recommend an anti-virus solution that lets you build a boot CD
>that will inspect the NTFS file system for trojans or viruses without any
>need to boot the OS on the file system you are inspecting?

Thats not going to be too common, because its not a very effective
model for ongoing A/V protection.

You could probably do something like this by combining together
something like BartPE or WindowsPE boot disks with Clamwin so that can
you can boot (or even PXE boot) off CD and run Clamwin to scan files
on the mounted hard drive.






Posted by FromTheRafters on July 2, 2008, 4:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Has Clamwin now gone beyond the mostly email scanning
database? I recall that Clam's original purpose had been to
look for the types of malware that you would expect to find
in the email environment and misused as an all around scanner
by many of the open source proponents.

It shouldn't be any problem inspecting the files, but affecting
them is another matter.

>>Can someone recommend an anti-virus solution that lets you build a boot CD
>>that will inspect the NTFS file system for trojans or viruses without any
>>need to boot the OS on the file system you are inspecting?
>
> Thats not going to be too common, because its not a very effective
> model for ongoing A/V protection.
>
> You could probably do something like this by combining together
> something like BartPE or WindowsPE boot disks with Clamwin so that can
> you can boot (or even PXE boot) off CD and run Clamwin to scan files
> on the mounted hard drive.
>
>
>
>
>


Posted by Will on July 3, 2008, 2:59 am
If you were  Registered and logged in, you could reply and use other advanced thread options
>>Can someone recommend an anti-virus solution that lets you build a boot CD
>>that will inspect the NTFS file system for trojans or viruses without any
>>need to boot the OS on the file system you are inspecting?
>
> Thats not going to be too common, because its not a very effective
> model for ongoing A/V protection.

Day-to-day protection has to balance many different issues like
intrusiveness and performance on a system under use. It's very easy to
subvert modern virus checking programs with root kit viruses. The rootkit
simply rewrites kernel functions and reports back to the virus checker only
the data it wants the checker to see.

Booting from a standalone CD is the only approach that guarantees that all
files on the file system can be inspected by an OS and application that is
not under control of a trojan or rootkit. It would be an extremely good
way of checking for hidden files or folders that would otherwise be hidden
from view if the rootkit were active.

It's a shame if no anti-virus vendor has seen to create such a bootable CD.

--
Will



Posted by David H. Lipman on July 3, 2008, 6:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>>>Can someone recommend an anti-virus solution that lets you build a boot CD
>>>that will inspect the NTFS file system for trojans or viruses without any
>>>need to boot the OS on the file system you are inspecting?

>> Thats not going to be too common, because its not a very effective
>> model for ongoing A/V protection.

| Day-to-day protection has to balance many different issues like
| intrusiveness and performance on a system under use. It's very easy to
| subvert modern virus checking programs with root kit viruses. The rootkit
| simply rewrites kernel functions and reports back to the virus checker only
| the data it wants the checker to see.

| Booting from a standalone CD is the only approach that guarantees that all
| files on the file system can be inspected by an OS and application that is
| not under control of a trojan or rootkit. It would be an extremely good
| way of checking for hidden files or folders that would otherwise be hidden
| from view if the rootkit were active.

| It's a shame if no anti-virus vendor has seen to create such a bootable CD.

| --
| Will



The problem is by nature a CDROM is Read-Only and thus can't be updated easily.
Thus, its
signature would go out of date rather rapidly.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Similar ThreadsPosted
http://www.spyware-solutions.info a website about spyware solutions November 11, 2006, 8:07 pm
free anti virus,anti spam, anti spyware softwares April 7, 2006, 7:01 am
Boot Virus Help June 22, 2006, 12:50 pm
Please help!! Boot Virus?? May 10, 2008, 11:46 am
advice on anti-virus, anti-trojan software May 12, 2008, 7:35 am
Boot Sector virus September 22, 2006, 6:38 pm
Virus-like Activity after a boot-time Scandisc November 11, 2007, 12:32 pm
recusive folder usb boot sector... virus March 14, 2008, 6:45 pm
Possilbe Virus, Computer Reboots, Can't Boot any Options November 19, 2006, 10:33 pm
Free virus scanning tool for boot sector and CMOS July 4, 2007, 1:28 am

The site map in XML format XML site map

Contact Us | Privacy Policy