What I want from an offline antimalware tool.

AntiMalware.feature

Feature: Offline system cleaning

We often come across Windows machines which have unknown malware installed.
There are relatively few entry points for such malware to run.
It should be possible to build an open source tool which scans these, even if the system is offline.

Background: Mount the offline system
  Given I've mounted the hard disk
  
Scenario: The disk is scanned
  Then I should see a choice of offline systems to scan
  
Scenario Outline: The registry is loaded
  When I choose which registry file(s) to load
  Then I should see <entry_point>
  
Examples:
  | entry_point | location |
  | BHO | ? |
  | Run_once | ? |
  | Run | ? |
  
Scenario: Removal
  When I click a registry entry
  Then I should be able to remove the value
  
Scenario: Add
  When I load a .reg file
  Then I should be able to merge it into the registry
  
Scenario: Modify entry points
  When I edit the config file
  Then future use of the software will load these new entry points
  
Scenario: Unload
  When I am finished editing
  And I exit
  Then the registry should be saved back to the filesystem