Discussion on:

Message 15 of 33
1 Vote
+ -
Sardu and Bart
If serious about malware management. then you'll want formal tools, i.e. those that work without runnig any code from the infected installation.

The two best platforms for such tools (in my experience) are Bart PE Builder and Sardu. There are others like Sardu, but I haven't tried them yet!

Bart PE Builder is based on the old XP or Server 2003 code base, which makes it a best fit for those and older OSs. Like those OSs in thier native form, it needs AHCI to be disabled for it to boot, else you'll get a STOP error. Remember to resore the original mode before booting the hard drve, else that is also likely to STOP.

Bart can read the hard drive installation's registry hives as if in effect, via the RunScanner plugin, if the OS is Windows 2000,XP or Server 2003. That alone can make Bart a very useful maintenance OS for these older Windows versions.

In contrast, Sardu simply straps together a number of bootable "rescue CDs" so they can be launched from a single boot optical disc or USB drive. I'm using it with AVG, Avira, Kaspersky, VirusBloka, Panda, Bit Defender and PC Tools AOSS.
Posted by cquirke
18th Oct