Before using the Rescue system make a backup of your important and personal files on an external drive.

Once you have created the AntiVir Rescue CD, insert it into the first CD-drive. At restart, the computer will boot from this CD-ROM and a boot menu appears.

Step 1:

To start the AntiVir Rescue System you can press “1” and then “Enter” or just the “Enter” key, since it is the default option.
Select “2” to start the installed operating system from the hard drive.



After a short time you will see the main menu of the Avira AntiVir Rescue CD.

Step 2:

You don’t have to download each time the newest Rescue system; an update is also possible within the Rescue System.
Select the tab “Update” and download the newest VDFs (virus definition files).
Click on “Yes” in the popup-window, once you have selected the tab



You can perform an update in advance (on a clean system) if there is no internet connection available:
For this purpose you need to start the file “updatergui.exe” in the directory \avupdate\windows of the Rescue system.

Important:
This procedure only works on a writable data carrier (e.g. USB-stick). How to use the Rescue System with a USB-stick is mentioned in our article.

Step 3:

Click on the tab „Configuration”. At “Action when malware found” select “Repair infected files” with the sub-category “Rename file if repair is not possible”. By selecting “Remove suspicious files” you can automatically remove all files at your own risk that have been confirmed as infected.

Step 4:

Click on the tab „Virus scanner“. By selecting “Start scanner” you will initiate the search for malware on all existing drives of the computer.

The length of time of the search process will depend on the number and volume of the files that have to be checked. According to the feedback in the report log you will know if a suspicious file has been found and if the repair has been successful.

Step 5:

Once the status indicates “Scan stopped”, you can save the log file „rescue-system_scan.log“ for the support or your administrator at any location on your hard drive by selecting “Disks”.



Additionally you can load this log file at a later point in time by selecting the tab “Miscellaneous” and selecting “Display log file”.

Step 6:

Select „Shut down“ on the bottom right to quit the Avira Antivir Rescue System. The computer will now be switched off.

Restart your computer after a short time and remove your Avira Antivir Rescue CD from the drive. Let Windows boot normally.
In case you have just renamed your infected files you should start a complete scan of your system to isolate those suspicious files (e.g. virusfile.exe.xxx) into the quarantine.

The virus removal is now complete.