Rootkit scan/remove external drive

  • Thread starter Thread starter layoric
  • Start date Start date
L

layoric

Guest
Anyone know which rootkit scanner can detect/remove a rootkit on a drive other than the current system drive? I connect customer drives to a bench machine and remove from there, but there is no option on utilities currently used to specify a different drive. I've been searching for quite some time to find a utility which does this, but am coming up blank.

Thanks for any input -
 
Rookits are tricky and the way the most rootkits scanners work require the OS to be running since they tend to be API, kernel, or memory based. TDSSKiller may scan at last the MBRs of slaved drives, but I'm not sure.
 
Back
Top