BartPE Plugin - RIP

[goombawaho]

Old news, but new to me. Glad I found out before I needed it.

So, company XYZ has pulled the plug on our ability to use the BartPE plugin with the command line scanner. This was an important tool in my bag of tricks. Not sure how I'm going to replace it. Open to suggestions on (preferably) another good BartPE virus scanner or a good "rescue bootable CD" for scanning.

You would think that XYZ would want to allow people to use their tool (even if it was not making them any money) to give themselves a good name in the malware removal community.

"With the End Of Life for the V1 DATs on March 31, 2010, the Command Line Scanner (scan.exe) has been removed from the daily SuperDAT packages (sdatxxxx.exe and xdatxxxx.exe). For compatibility reasons, a stub file named scan.exe will remain in the SuperDAT packages. However, this is is not an actual executable file."

 

[2ffat]

These are the ones I use the most in my arsenal: Avira (it's OK), Caine (I haven't tried NewLight yet), Dr. Web CureIt! (highly recommended), and AVG Rescue CD (my favorite and the easiest to use).

AVG allows you to do updates via the internet so you can have the latest updates. Some of the others do, too, but AVG's interface is the easiest since it only does one thing. Most of the others are Linux based and may require some *nix knowledge but most are very easy to figure out.

One other that I use is Slax. Again, Linux based but it is modular so you can download the tools you need or want.


James P. Cottingham
^{I'm number 1,229!
I'm number 1,229!}

 

[BadBigBen]

Take a look at ClamAV...

ClamAV

http://www.clamav.net/lang/en/about/win32/

and the BartPE Plugin

http://www.ece.msstate.edu/~lane/

also to add to the list above, Kaspersky Live CD...

http://support.kaspersky.com/de/viruses/rescuedisk

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[goombawaho]

I don't like it already (Clamato AV) - the first line on their site says the following:

"ClamAV for Windows 2.0"


What does that mean - windows 2.0????????????


I really want a bartpe plugin type of scanner because I can use the other tools on the bartpe (regedit, file deletion/copy) after doing a scan or in conjunction with those results. Otherwise, I have to put a different CD in and wait for boot.

 

[BadBigBen]

Goom, LOL...

name of Program: ClamAV for Windows & Version: 2.0

ClamAV started out on Linux and was ported over to the Windows OS...





Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[papadba]

What does that mean - windows 2.0????????????

Unless it was a casualty of Katrina, i still have the install diskettes/doc for Windows 2.0 in a box. . . Which is over 20 years old. . . Flime ties<g>

And yup, i did realize that the ClamAV product is not for the 2.0 Windows release. . .

 

[goombawaho]

Ok, but it's still not a "major player" in the AV world, which is kind of what I was looking for.

 

[2ffat]

<off-topic>

Unless it was a casualty of Katrina, i still have the install diskettes/doc for Windows 2.0 in a box. . . Which is over 20 years old. . .

I just threw away a bunch of MS-DOS 6.22 installation disks.
</off-topic>


James P. Cottingham
^{I'm number 1,229!
I'm number 1,229!}

 

[BadBigBen]

Goom,

in that case how about an Avira PlugIn...?

http://www.wieldraaijer.nl/bartpe/

third one down...


Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[goombawaho]

Yeah - I had seen that, not enthused, but..........

 

[BadBigBen]

well, can't help you then...



Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[goombawaho]

I want what I had. Boo hoo. That's not your fault though.

 

[strongm]

>but new to me

ooh - and new to me too. One of clients uses MailMarshal, and MailMarshal is using the commandline scanner ... hmmm ...

 

[strongm]

Ah - s'ok, I'm a corporate customer ...

https://kc.mcafee.com/corporate/index?page=content&id=KB52944

 

[goombawaho]

Well that's just special for you, isn't it. Your little world is just fine while mine is crumbling around me. Joking of course.

I could have used that plugin just the other day for a couple of rather evil infections I was battling.

 

[strongm]

(if it makes you feel happier, they're killing off even that corporate enterprise version in Jan of next year - but at least that gives me a chance to plan, test and implement an alternative)