I just tried a couple of rescue disks (AVG and Kaspersky), and I was wondering if someone knew of a solution that would work like this:
- The AV solution boots from a USB key, and works entirely from RAM (where the latest virus DB is downloaded)
- The user inserts his Windows CD/DVD in the drive
- If any Windows file is compromised, the AV application fetches a clean version from the CD/DVD and restores it on the hard drive
- optionally, any compromised drive/user-land application is quarantied, and it is up to the user to reinstall those after he successfully rebooted into a restored Windows setup
Have you heard of a solution like this? It seems silly to reinstall a whole Windows computer just because one or a few system files were compromised.