How to ensure PC is clear from virus infection by using script to check?
This is a planning in writing a vbscript to find out PC OS, service pack, missing patches, computer name, antivirus software installed, personal firewall, and so on. This vbscript was evaluated and works without problem. The "last piece" of the check that we are thinking to put in is the checking of PC for any possible infection of virus. How do we ensure that the pc is really virus-free? Can we write a script to check for some "run", "runonce", and other registry key and values? the objective is this seems to be a "preliminary" check for the virus infection, malware, spyware, and so on. MS Windows clients from windows 7 to windows 10.
If so, any sample for the script on this virus checking?
Thanks in advance.
If so, any sample for the script on this virus checking?
Thanks in advance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks both experts in giving the advises. At the end, we decided to use Kaspersky Virus Removal Tool (kvrt.exe) to scan the PC. although the scan can't quarantee 100%, however, it is helpful.
But to assure with a reasonable confidence that a system is virus free is to create a new system from a newly formatted drive, install fron new packages the software you want to use, and clone that each time you want a clean system. The master system should never be run on a system except for updates, and on a trusted computer. I would include a good virus protection on the master system as well just to help it stay clean.
The script would be to clone that drive to a newly formatted drive.
From that point on, if the clone is used on any system with a network connection or the ability to plug in a usb device, there is no way to assure that it will stay virus free.
You should look at all the protection software and include one or two good packages to help protect the system. Do not allow users to install any software, plugins, or extensions. If it must stay clean, access to the internet should be disabled, and adding usb device prohibited. Quite difficult if the user requires internet access.
That is about as sure as you will get. And even then, zero day exploits might still get through. That is always a problem.