I work in IT, and we constantly get PCs that are infected with viruses. For our desktop HDs, I simply snap the HDs into a USB dock on my Mac and run various AV against the data - then copy the data over to a network share (the HD is usually DBAN'd before ReImaging) to be added back to the Reimaged HD.
With the laptops which are encrypted with Safeboot, I cannot do this. Instead we have BartPE CDs, and use an external HDs (which we copy the SDB file - the key to 'unlock' Safeboot) and then copy data to the external HD. Problems with BartPE is that it takes usually over 3 hours to mount the infected HD, and then copying data to the external HD literally takes days. After the data is pulled, then external HD is moved to the mac to get the files cleaned/checked, before moving to a network share.
Figuring that the Mac is overdue for replacement (it's a G4 Quicksilver). We wanted to see if we could build a Linux box, that could possibly handle the Safeboot mounting (with us supplying the needed SDB file). We would also want to see what AV programs could be installed into Linux, to do all of the data recovery/cleaning in 1 machine. We have tinkered with a PC running Mint Linux, and ClamAV seems a bit lame.
