maritoboy
asked on
Bootable Antivirus CD?
Hello friends,
There has to be a better way. I am desperately looking for a (way to create a) bootable antivirus CD that is update-able for Windows workstations that either won't boot into Windows (because of a virus) or else that cannot get a certain virus removed because it's running in memory even in safe mode (like some nasty DLL files). It's 2005--how come we still don't have this? That is, I know of ONE such thing, the Avast BART CD, but it is very expensive. Are there any others? I don't even want any of the fancy things like disk recovery tools but only a way to burn an updated antivirus CD (ISO file or whatever) that lets me scan harddisks without having to boot TO the harddisk. I know I can take harddisks out and put them as slaves into another computer and scan from there, but there has to be a better way. Any ideas? Thanks much.
There has to be a better way. I am desperately looking for a (way to create a) bootable antivirus CD that is update-able for Windows workstations that either won't boot into Windows (because of a virus) or else that cannot get a certain virus removed because it's running in memory even in safe mode (like some nasty DLL files). It's 2005--how come we still don't have this? That is, I know of ONE such thing, the Avast BART CD, but it is very expensive. Are there any others? I don't even want any of the fancy things like disk recovery tools but only a way to burn an updated antivirus CD (ISO file or whatever) that lets me scan harddisks without having to boot TO the harddisk. I know I can take harddisks out and put them as slaves into another computer and scan from there, but there has to be a better way. Any ideas? Thanks much.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the help. I will take a look at the do-it-yourself CD, but I think this CD can only be used on your OWN machine and not on others (which is what I would need it for).
Simon-- I am asking about this in general, but I have lately had a problem that triggered my question. It is a virus that AVG's free Antivirus recognizes as a variant of the Startpage trojan. I forgot its exact name-- I think Startpage.J19 or something. Even booting into safe mode, it was impossible to get rid of the DLL file (se.dll)---either it was locked and couldn't be deleted, or else it could be deleted but would pop right back up again. What to do in such a case? I don't know why updated bootable antivirus disks are not yet on the market, at least not in a big way. And I don't think I want to spend 600 dollars for one year on the AVAST disc. I troubleshoot PC problems for home users and such a disc would come in real handy.
Simon-- I am asking about this in general, but I have lately had a problem that triggered my question. It is a virus that AVG's free Antivirus recognizes as a variant of the Startpage trojan. I forgot its exact name-- I think Startpage.J19 or something. Even booting into safe mode, it was impossible to get rid of the DLL file (se.dll)---either it was locked and couldn't be deleted, or else it could be deleted but would pop right back up again. What to do in such a case? I don't know why updated bootable antivirus disks are not yet on the market, at least not in a big way. And I don't think I want to spend 600 dollars for one year on the AVAST disc. I troubleshoot PC problems for home users and such a disc would come in real handy.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
" I will take a look at the do-it-yourself CD, but I think this CD can only be used on your OWN machine and not on others "
Not sure why you think that. The BartPE CD should work on any Windows system (unless you're thinking of some licensing issue?)
Not sure why you think that. The BartPE CD should work on any Windows system (unless you're thinking of some licensing issue?)
Also, there are simpler ways to get rid of those files that are "always locked or access denied" cases. Post back if you're interested specifically in that.
Not sure about licensing - will DEFINITELY have to review that... but assuming there is no legal issue, it works fine on other systems - at least the one I've tried - made my BartPE CD at home on my XP Pro SP1 system and booted a client's XP Home SP2 system with it.
ASKER
Hello all, thank you for your help. I didn't think of running Spysweeper, I could have done that. Not sure if it would have worked because I figured if the AVG can't get rid of it, why should Spysweeper? :) I had turned off System Restore, to my knowledge, and was working in Safe Mode, and still the file kept reappearing. This was about 2 weeks ago. Anyway, thanks for the advice. If I come across this problem again, I will do as suggested.
I guess I was mistaken on the BART CD being only for your own computer. I meant as regards compatibility, not regarding legal issues of licensing, though that's another important matter.
r-k, yes, I'd be interested to learn more about the "always locked or access denied" cases, that is, how to get rid of such files.
Thank you so much, all of you.
I guess I was mistaken on the BART CD being only for your own computer. I meant as regards compatibility, not regarding legal issues of licensing, though that's another important matter.
r-k, yes, I'd be interested to learn more about the "always locked or access denied" cases, that is, how to get rid of such files.
Thank you so much, all of you.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
By the way, I completely agree with r-k comments above.
AVG is not the best (in my opinion) Antivirus available as although it detects the virus, it doesn't clean it, it will only delete the file.
McAfee's Virusscan 8.0i has a far superior cleaning ability and would actually clean the virus to start with.
With antivirus, you do pay for what you get, but McAfee is still cheap
I only sell McAfee Antivirus as it's definitely the best in the business.......
Any more problems, just let us know !
AVG is not the best (in my opinion) Antivirus available as although it detects the virus, it doesn't clean it, it will only delete the file.
McAfee's Virusscan 8.0i has a far superior cleaning ability and would actually clean the virus to start with.
With antivirus, you do pay for what you get, but McAfee is still cheap
I only sell McAfee Antivirus as it's definitely the best in the business.......
Any more problems, just let us know !
ASKER
Thank you for all your help. Just one more question on the BART PE CD. How do you update the antivirus? Do you have to create a whole new CD every time?
ASKER
Hello guys, here I am with a question about my newly created BART CD, of course. :)
I think I did everything according to the instructions and burned all the files from the local BART PE folder (C:\pebuilder313\BartPE) onto a CD, and though the BART CD works fine in Windows (I can even do a virus scan through the McAfee plugin), it does not boot up. I set my computer to boot from CD, and though the CD is accessed, it apparently finds nothing bootable in there and then proceeds to boot from the harddrive, that is, into my regular Windows. But the whole reason I wanted this BART CD in the first place is in order for the harddrive NOT to be accessed so that hard-to-delete viruses and files can be taken care of and do no run in memory. Any ideas? I did not see an ISO file in the root folder of my CD or the BART PE directory (C:\pebuilder313\BartPE), by the way.
Thanks!
Mario
I think I did everything according to the instructions and burned all the files from the local BART PE folder (C:\pebuilder313\BartPE) onto a CD, and though the BART CD works fine in Windows (I can even do a virus scan through the McAfee plugin), it does not boot up. I set my computer to boot from CD, and though the CD is accessed, it apparently finds nothing bootable in there and then proceeds to boot from the harddrive, that is, into my regular Windows. But the whole reason I wanted this BART CD in the first place is in order for the harddrive NOT to be accessed so that hard-to-delete viruses and files can be taken care of and do no run in memory. Any ideas? I did not see an ISO file in the root folder of my CD or the BART PE directory (C:\pebuilder313\BartPE), by the way.
Thanks!
Mario
From step (3) at http://www.nu2.nu/pebuilder/#start
"At the main PE Builder dialog, enable the "Create ISO image".."
did you do this step?
"At the main PE Builder dialog, enable the "Create ISO image".."
did you do this step?
ASKER
Oh, good point. Well, I remember that I had a dilemma there -- of course I had my Windows CD in the drive so it could copy the files from there, and so of course I couldn't also put in a blank CD to write to at the same time. This is a laptop, so I don't have a second drive. Should I copy the Windows CD to my harddrive first and then have it pick up the files from there?
Mario
Mario
As I recall, what I did was to select "Create ISO Image", and un-check "Burn to CD".
This resulted in a file named pebuilder.iso getting created on the hard drive, which I later used to make a bootable CD. (I have Roxio, so if you have that also I can send details on how to make a CD from ISO image).
This resulted in a file named pebuilder.iso getting created on the hard drive, which I later used to make a bootable CD. (I have Roxio, so if you have that also I can send details on how to make a CD from ISO image).
ASKER
OK, guess what: I checked my Bart folder on the harddrive and there was the pebuilder.iso file, so I copied that onto my CD as the only file on it (I use a CD-RW while I'm trying to figure this out). But now the CD *still* won't boot! This is not my first time having a problem with an ISO image file not booting. I downloaded a trial for the AVAST BART CD and that doesn't boot either, though it's an ISO file. Unbelievable!
You can't just copy the iso file to your CD. You have to use a special option in your CD burning software to create a CD from the iso file.
For example, with Roxio v6 (which I have), I do the following:
Launch the Roxio front end -> Disc Creator Classic -> File -> Record Disc from Image..
etc.
If you can tell us which CD burning program you are using (Roxio, Nero etc?) and which version, we might be able to tell you exact sequence.
Also, I would highly recommend using CD-R media rather than RW for this purpose - much more stable and compatible with more drives.
For example, with Roxio v6 (which I have), I do the following:
Launch the Roxio front end -> Disc Creator Classic -> File -> Record Disc from Image..
etc.
If you can tell us which CD burning program you are using (Roxio, Nero etc?) and which version, we might be able to tell you exact sequence.
Also, I would highly recommend using CD-R media rather than RW for this purpose - much more stable and compatible with more drives.
With acknowledgements to r-k, here's a link on how to burn an ISO image:
http://iso.snoekonline.com/iso.htm
http://iso.snoekonline.com/iso.htm
That's a useful link (added to my list for future reference...) Thanks leew!
ASKER
Hey, very good! Thank you. It worked! I used my NERO software to burn the ISO image and now it's working beautifully! This kind of CD is exactly what I needed. Two questions I have still, though: to update the antivirus, is there some easier way or do I have to burn a whole new image and CD every time? Secondly, what is the advantage of slipstreaming Service Pack 2 into this Bart CD -- will it have more or better features or something?
If I could, I would give you guys some extra points......
Mario
If I could, I would give you guys some extra points......
Mario
Sorry for restarting this old topic, but what about UBCD (ultimate bootCD), that has AVG and a lot of useful tools on it, plus best of all it's free
With the major vendors, I'm sure the only thing you can do is to create a Rescue Disk.
I can try to help you to get rid of the virus that runs in Safe Mode
What virus is it ? Are you sure it's a Virus and not some malware instead ?
What virus scanner are you using and what spyware scanner ?
Thanks
Simon