Is there any AV tool I can use on a USB and clean infected computers?

slicksilver

Golden Member
Mar 14, 2000
1,571
0
71
I gotta take care of 8 computers. All of them are in retail locations and do not have internet. Almost all the users copy files to usb drives and back to the PC. Is there a AV tool I can send to them to clean their computers every now and then?

Thanks
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
If the computers can boot from USB, then you could make a bootable USB device using Kaspersky Rescue CD: http://support.kaspersky.com/us/viruses/rescuedisk/main?qid=208286083

If they have Admin privileges on the systems in question, then you could also use Kaspersky's virus-removal tool from within Windows: http://www.kaspersky.com/free-virus-removal-tool


For a system with no Internet access, also consider addressing the likely infection methods proactively.

1. arbitrarily disable AutoRun completely. http://www.mechbgon.com/build/autoplay.html

2. enable the Windows Firewall if it isn't already.

3. lock down the Admin privileges. Anyone using the computer should be on a Standard User (non-Admin) user account.

4. lock down the execution of executables using either Family Safety, or Software Restriction Policy: http://www.mechbgon.com/srp

5. it wouldn't hurt to install EMET 4.0, a free utility from Microsoft that makes it harder to exploit vulnerabilities in Windows and other software.
 

John Connor

Lifer
Nov 30, 2012
22,757
617
121
I wonder if you can use kaspersky's Rescue2USB.exe to create a boottable USB stick of Avira AntiVir Rescue System? I shall try it and report back.
 

Mushkins

Golden Member
Feb 11, 2013
1,631
0
0
Gotta be careful with USB sticks for this. Make sure you're going the bootable route and not just sticking AV/malware software on a USB. It's entirely possible to have your "Rescue Tools" usb get infected itself just by plugging it into a live infected system.