Using Avira Rescue System

The Avira Antivir Rescue System is a downloadable file that can then be burned to a CD or DVD disc. This disc is used to boot up your computer instead of Windows. This allows the removal of some very stubborn types of malware that would not normally be removable because of their ability to manipulate the operating system.

Making the CD or DVD

Use the information and links below to download a special version of Avira Antivir. After you download the file to the Desktop (or your download folder), put a blank CD into the drive. If you don’t have a CD, put a blank DVD if your computer can boot from a DVD. Then double click the Avira file you downloaded. It will burn it’s files onto the CD/DVD automatically. It’s actually installing a stripped down version of the Linux operating system along with Antivir for Linux. Don’t worry, it will work on your Windows file system. When it is complete, put the CD or DVD in the drive of the infected computer. If the infected computer is the one you used to download Avira Rescue System, leave the CD/DVD in the drive because you want to close Windows, restart the computer and boot from that disk. It will load itself, you don’t have to select anything from the menu that shows up, just let it run it’s course until the Antivir program is loaded. The tricky part may be getting your computer to actually boot from the CD/DVD drive. Now for the details…

Download “Avira Antivir Rescue System”

Important – There are two entries with the same name in this list. You want the first one named “Avira Antivir Rescue System”

If the above link does not work, use the one below and just click the download button…

http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html

When you save the file, the file name will be “rescue_system-common-en.exe”. Save it to the Windows Desktop or your download folder

Put a blank CD or DVD in your CD/DVD writer

Double click the “rescue_system-common-en.exe” file you just downloaded to begin the CD/DVD burn process.

After the CD/DVD is created, leave the disc in the drive and close Windows, Reboot the computer.

Issues when booting from a disc in the CD or DVD drive

If your computer does not boot from the CD/DVD, you may need to change the “Boot Order”.

You will need to access your computers BIOS Configuration screen to do this. If you are unsure how to

do this, see your computer manual. The following link may help:

http://www.whitecanyon.com/esupport/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=7

An example of accessing the BIOS using a Dell Inspiron

Let’s assume your system is a Dell Inspiron. Scroll down the list and find Dell Inspiron in the left pane. Look directly opposite in the right pane and you’ll see that the BIOS key for your system is the “Function 2″ (F2) key. The “Function Keys” are located across the top of your keyboard. Starting from the top left “F1″ consecutively all the way across to the “F12″ key. Now that you know where to look, place your finger at the ready on the “F2″ key then reboot the system. As the system shuts down the screen goes black just before it starts to boot back up…it’s at that black screen when you want to start tapping on that “F2″ key. Continue tapping the key about every second until the system’s BIOS screen appears.

To change the Boot Order

It will help to have the computers manual for this step. On the BIOS screen, locate the system’s boot sequence settings. Use the arrow keys to move the cursor that highlights the item you want to select/move. Once you have the CD/DVD drive selected then move it to the top of the boot order. Save those settings and exit the BIOS, then, with the CD or DVD in the drive, reboot the system. Now, when the system boots up, it should use the CD or DVD that you inserted as it’s boot up device.

Running the Avira Antivir Scan

When the system comes back up, you will be presented with a menu having two options. Do not do anything at this point! The recovery program will load in a few seconds by itself. Once the application loads, you will see two “Flag” icons in the lower left corner…the one on the left is a German flag and the one on the right is a British flag. Click the British Flag icon and the language will convert to English. Now click the “Configuration” button Under “Scan Mode”, select “Scan all files”

Under “Action at malware discovery”

Select “Try to repair selected files” and place a check next to “Rename files if they  cannot be removed”.

Now click the “Virus Scanner” button and click the “Start Scanner” button to begin the scan.

Be Careful

There may be times when the scanner doesn’t seem to be doing anything. It’s probably processing a large file. Do not interrupt the scan. You will get a definite indication when the scan is complete. Of course, if the scanner seems to be scanning the same file for 30 minutes or more, then it probably really is stuck. Let us know if it keeps indicating it’s scanning the same filename for 30 minutes or more. Let us know the results of the scan.

When it’s finished, take the disk out, label it with “AntiVir Linux Boot Disk’, and put the date on the disk. Use a soft felt marker. Store it in a safe place.

Just the beginning

You should think of this as a good first step to recovering your computer. Hopefully, after running this scan, you will be able to access your computer and the Internet. However, do not trust one anti-malware program to totally clean your computer. You need to use other products. At this point you should consider taking further steps. Here is a list of other programs that I recommend you try. Also, read about our recommendations for protective software

Malwarebytes.org “Anti-Malware” program

ESET Online Virus Scan – (requires Internet access)

Avira Antivir Personal Edition – for those who want a free Anti-Virus program that doesn’t  use a lot of computer resources.

ESET NOD32 AntiVirus version 4 - This is a 30 day trial version of what is in my opinion, the best Anti-Virus product currently available.

OpenDNS – OpenDNS is a free service that focuses on blocking access to “phishing” sites and other malicious sites. Read more in this article.

Web of Trust is a free plugin for your browser that will indicate possible malicious websites in your search engine results. Read more in this article.