favorite tool for analyzing hacked windows partitions

[Matthew Gillen]

Matthew Gillen wrote:
> My brother just called me with some symptoms that sound an awful lot like 
> his windows machine has a virus.
> 
> What are some of your favorite bootable-CD distros for seeing what's on there?

Trolling through distrowatch.org for a while turned up a couple promising leads:
http://www.sysresccd.org/Main_Page  (full-featured)
http://www.inside-security.de/insert_en.html (fits on a credit-card-cd)

I'm still curious to see anyone's recommendations though.

Thanks,
Matt