blocks|key|4335952|text|无论是终极启动CD还是Windows版本。我建议使用基于windows的磁盘来清洗windows系统。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://www.ultimatebootcd.com/|1|http://www.ubcd4win.com/^0|3|6|0|B|9|1^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@$A|N|B|O|1|P]|$A|Q|B|R|1|S]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]|K|$5|F|G|H|C|$I|L]]]]

Either the <a href="http://www.ultimatebootcd.com/" rel="nofollow noreferrer">Ultimate Boot CD</a> or the <a href="http://www.ubcd4win.com/" rel="nofollow noreferrer">Windows version</a>. I would recommend the windows PE based disk for cleaning windows systems.

blocks|key|599700|text|我过去曾成功地使用过SystemRescueCD。还有SLAX和NTFS-3G模块。两者都允许将数据从一个HD传输到另一个HD。在将文件放到另一个系统之前，一定要先扫描它们。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://www.sysresccd.org/Main_Page|1|http://www.slax.org/|2|http://www.slax.org/modules.php?action=detail&id=2357^0|A|E|0|R|4|1|W|9|2^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@$A|P|B|Q|1|R]|$A|S|B|T|1|U]|$A|V|B|W|1|X]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]|K|$5|F|G|H|C|$I|L]]|M|$5|F|G|H|C|$I|N]]]]

I've used <a href="http://www.sysresccd.org/Main_Page" rel="nofollow noreferrer">SystemRescueCD</a> successfully in the past. Also there is <a href="http://www.slax.org/" rel="nofollow noreferrer">SLAX</a> with the <a href="http://www.slax.org/modules.php?action=detail&amp;id=2357" rel="nofollow noreferrer">NTFS-3G module</a>. Both allowed be to transfer data from one HD to another. Make sure you scan the files before putting them on another system.

blocks|key|599727|text|我强烈建议做一个备份，然后进行干净的重新安装，这样就更安全了，因为即使在扫描仪找不到任何东西之后，您也无法确定是否还剩下一些东西。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

I highly recommend doing a backup followed by a clean reinstall, it's much more secure, as you are never sure that there isn't something left even after the scanners didn't find anything anymore.

blocks|key|599861|text|一旦检测到病毒，我采取的方法是，整个安装现在是可疑的，不应该被信任。我不认为试图“收拾烂摊子”会有什么好处。减少损失，重新安装。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|599862|当病毒损坏你的系统，只有一个方法你可以确定你已经删除了病毒的所有痕迹，那就是做一个完整的重新安装，包括重新格式化你的驱动器(S)。希望你的朋友能定期备份他们的系统。现在做备份已经太晚了，就像其他人建议的那样。如果现在执行备份，则可能会创建受病毒感染的备份，因为无法确定哪些文件受到病毒的影响。如果您要从受病毒感染的备份中恢复数据，则可能会回到您朋友现在所处的状态。:-(|599863|我建议采取一种稍微不同的方法：|599864|在机器被感染之前找到最新的备份。如果您的朋友没有进行定期备份，这将是教训他们开始定期备份。:-)|unordered-list-item|599865|从头开始重新安装操作系统，包括重新格式化驱动器(S)。|599866|从干净的备份恢复。|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|P|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|H|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|H|7|S|8|@]|9|@]|A|$]]]|M|$]]

Once a virus is detected, I take the approach that the whole installation is now suspect and should not be trusted. I don't think there's anything to be gained by trying to "clean up the mess." Cut your losses and re-install.

When a virus damages your system, there's only one way you can be certain that you've removed all traces of the virus, and that's to do a complete re-installation, including re-formatting of your drive(s).
Hopefully, your friend has been performing regular backups of their system. It is now too late to do a backup as others have suggested. If you perform a backup now, you're potentially creating a virus infected backup because you cannot be sure which files have been affected by the virus. If you were to restore data from a virus infected backup, you could end up back in the same situation your friend is in now. :-(

I'd suggest a slightly different approach:

<ul>
<li>Locate the newest backup prior to the machine becoming infected. If your friend has not been making regular backups, this will be the lesson that will teach them to start making regular backups. :-)</li>
<li>Re-install the OS from scratch, including re-formatting the drive(s).</li>
<li>Restore from the clean backup.</li>
</ul>

blocks|key|599791|text|你可以用Knoppix和ClamAV来做。您可以在Knoppix上使用一些工具(对不起，我忘记了名称)来访问注册表，但是清除注册表非常棘手。然而，ClamAV在查找文件系统中的病毒方面做得很好。但有些间谍软件(和病毒，我想)会把自己的各种地方，在注册表，以便它恢复自己。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|599792|更好的选择:备份系统，进行干净的安装，扫描仍然需要的文件(文档、电影、音乐)并复制这些文件。从头开始重新安装任何软件，不要复制任何注册表。|599793|以下是一些有用的链接：|599794|http://www.extremetech.com/article2/0,1697,1918306,00.asp|unordered-list-item|offset|length|599795|http://books.google.com/books?id=YaSWlOOxshsC&lpg=PA272&ots=rGcqfUi-Ol&dq=knoppix%2520clamav%2520registry&pg=PA269|599796|http://www.greenfly.org/talks/knoppix/rescue.html|entityMap|0|LINK|mutability|MUTABLE|url|1|http://books.google.com/books?id=YaSWlOOxshsC&lpg=PA272&ots=rGcqfUi-Ol&dq=knoppix%2520clamav%2520registry&pg=PA269|2^0|0|0|0|0|1L|0|0|0|32|1|0|0|1D|2^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Y|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Z|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|10|8|@]|9|@$I|11|J|12|1|13]]|A|$]]|$1|K|3|L|5|H|7|14|8|@]|9|@$I|15|J|16|1|17]]|A|$]]|$1|M|3|N|5|H|7|18|8|@]|9|@$I|19|J|1A|1|1B]]|A|$]]]|O|$P|$5|Q|R|S|A|$T|G]]|U|$5|Q|R|S|A|$T|V]]|W|$5|Q|R|S|A|$T|N]]]]

You can do it with Knoppix and ClamAV. There's tools (sorry, I forget the name) you can use on Knoppix to access the registry, but it's pretty tricky to clean out the registry. ClamAV will do fine at finding viruses in the filesystem, however. But some spyware (and viruses, I assume) will put itself all sorts of places in the registry so that it reinstalls itself.

Better option: back up the system, do a clean install, scan the files (documents, movies, music) that are still needed and copy those over. Reinstall any software from scratch and don't copy any of the registry over.

Here's some useful links:

<ul>
<li><a href="http://www.extremetech.com/article2/0,1697,1918306,00.asp" rel="nofollow noreferrer">http://www.extremetech.com/article2/0,1697,1918306,00.asp</a></li>
<li><a href="http://books.google.com/books?id=YaSWlOOxshsC&amp;lpg=PA272&amp;ots=rGcqfUi-Ol&amp;dq=knoppix%20clamav%20registry&amp;pg=PA269" rel="nofollow noreferrer">http://books.google.com/books?id=YaSWlOOxshsC&amp;lpg=PA272&amp;ots=rGcqfUi-Ol&amp;dq=knoppix%20clamav%20registry&amp;pg=PA269</a></li>
<li><a href="http://www.greenfly.org/talks/knoppix/rescue.html" rel="nofollow noreferrer">http://www.greenfly.org/talks/knoppix/rescue.html</a></li>
</ul>

blocks|key|4336067|text|如果您使用Windows，我强烈建议使用Bart+PE。有许多杀毒插件可供使用，以及您可能需要的每个灾难恢复工具。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

If you work with Windows I highly recommend Bart PE. There are a number of antivirus plug-ins available for it, as well as just about every disaster recovery tool you might need.

A friend of mine got his Vista PC infected by a virus. Before I tell him to just reboot with the maker-provided recovery DVD and lose all his data, is there a recommended Linux/*BSD live CD that he could try to clean up the mess?

Thank you.

*nix live CD to recover Vista host?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我的一个朋友让他的Vista电脑感染了一种病毒。在我告诉他用maker提供的恢复DVD重新启动并丢失所有数据之前，是否有推荐的Linux/*BSD直播CD，他可以尝试清理这个烂摊子？谢谢。

问*nix live恢复Vista主机？
EN

回答 6

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问*nix live恢复Vista主机？EN

回答 6

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问*nix live恢复Vista主机？
EN