Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Offline virus scanner

Created: 23 Aug 2012 | 5 comments

At MAN Diesel we have until now used a tool from avast! for our service engineers for scanning the PCs that run our application at customers. Unfortunately this product has been discontinued.

The application is running on an MS Embedded XP platform. The PC has no connection to the internet and we do not wish to install a virus scanner on the PC.

The use case is, that the service engineer brings with him a USB memory stick updated with a virus scanner and the latest virus definitions. He then boots the PC from the USB stick and runs a complete virus scan of the hard-disk.

Does Symantec have a product that will fulfill these requirements?

Comments 5 CommentsJump to latest comment

.Brian's picture

You can try SERT

Symantec Endpoint Recovery Tool (SERT)

https://www-secure.symantec.com/connect/videos/sym...

How to make the Symantec Endpoint Recovery Tool boot from a USB memory stick

http://www.symantec.com/business/support/index?pag...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

W007's picture

If the machine does not have Internet access and you want to scan it, you would need anyway to download latest definition if you want the scan to be effective (http://www.symantec.com/docs/TECH131732).

Another technology exists, called PowerEraser (http://www.symantec.com/theme.jsp?themeid=spe-user-guide) to consider more like a generic removal tool, but it also requires Internet access to communicate with Symantec reputation servers.

Edit.

How To Use the Symantec Endpoint Recovery Tool with the Latest Virus Definitions

 

http://www.symantec.com/business/support/index?pag...

 

Video - https://www-secure.symantec.com/connect/videos/sym...

 

Check this fourms

https://www-secure.symantec.com/connect/forums/bootable-cd-sep-or-support-tool

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mithun Sanghavi's picture

Hello,

Yes, you could Either Run the Power Eraser utility OR Symantec Endpoint Recovery Tool.

1. The Power Eraser Tool eliminates deeply embedded and difficult to remove threats that traditional virus scanning doesn't always detect.

2. If you have access to Fileconnect, the SERT (Symantec Endpoint Recovery Tool) is useful in situations where computers are too heavily infected for the Symantec Endpoint Protection client installed upon them to clean effectively. The Consumer version of this tool is the Norton Bootable Recovery Tool.  The tool is free, so there is no need for a Fileconnect account to download the software.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Fabiano.Pessoa's picture

If your machine does not let you install antivirus?
Do the following places the Symantec Power Eraser Tool, and run a scan in safe mode, always in safe mode.
Even offline, the virus can still have normal activity, many applications sometimes does not pass INFORMATION attackers, but keep on file to pass later.

hugs

Fabiano Pessoa

Systems Analyst - Forensic Expert