If there is a way to do this, how do you know the last known good configuration doesn't include a virus? The system does not know what a "good configuration" is. I can just forsee the LKGC containing a major problem. Then what?