What is the right way to scan an infected computer with Kaspersky Premium? USB? Direct install? Rescue Disk? ...

[duckduckgow]

I have purchased the premium licence but not sure what is the safest way to scan my infected computer. Should i install Kaspersky on a USB and plug it into the infected computer? should I put the installed directly in the infected PC and install it there? wouldn't this then infect the anti-virus as well? Is there a better method?

[harlan4096]

Welcome to Kaspersky Community.

 

If Your system is already infected, I would go then 1st to USB boot with:

 

https://support.kaspersky.com/krd18/new/14220#block2

 

Then, You can use KVRT standalone tool:

 

https://www.kaspersky.com/downloads/free-virus-removal-tool

 

And once the system is clean, then install KPremium.

[lightof7ustice]

Another way I would like to propose. Do you have another computer with a spare nvme/sata slot (depending on the type of the infected disk)? You can try to pull the hard drive/disk out of the infected PC and connect it to the clean one with Kpremium installed. This way you would have access to KSN and thus better scan effectiveness and efficiency with cloud definitions.

[harlan4096]

KVRT also has access to KSN I think 🙂

[duckduckgow]

3 hours ago, lightof7ustice said:

Another way I would like to propose. Do you have another computer with a spare nvme/sata slot (depending on the type of the infected disk)? You can try to pull the hard drive/disk out of the infected PC and connect it to the clean one with Kpremium installed. This way you would have access to KSN and thus better scan effectiveness and efficiency with cloud definitions.

Thanks lightof7ustice. but what if components other than the SSD (like BIOS/EUFI s) are infected? Will they not remain infected on the original computer?

Edited October 10 by duckduckgow

[Halbour]

6 hours ago, lightof7ustice said:

Another way I would like to propose. Do you have another computer with a spare nvme/sata slot (depending on the type of the infected disk)? You can try to pull the hard drive/disk out of the infected PC and connect it to the clean one with Kpremium installed. This way you would have access to KSN and thus better scan effectiveness and efficiency with cloud definitions.

No, please don't attach an infected device to a clean one...

I recommend following @harlan4096's first comment.

[lightof7ustice]

3 hours ago, duckduckgow said:

but what if components other than the SSD (like BIOS/EUFI s) are infected? Will they not remain infected on the original computer?

Yeah, this way you can't disinfect BIOS/UEFI, although it's more like a matter of probabilities having viruses/trojans infecting BIOS/UEFI nowadays I'm afraid. That's kinda rare these days. Anyway, antivirus software will not be your best weapon for infected BIOS in that case. Flashing it may be necessary.

Still, following @harlan4096's comment is recommended. He is our expert here. 

34 minutes ago, Halbour said:

No, please don't attach an infected device to a clean one...

No worries, as long as Autorun for that disk is disabled (which is the default case for Win 10/11 now I think), the Viru/Trojan samples are more like stasis files to be cleaned without the capabilities of autoruning themselves in a clean OS, just like cleaning them in PE environment with K Rescue Disk.