VIPRE Rescue

VIPRE Rescue

VIPRE PC RescueVIPRE PC RescueVIPRE PC RescueThe VIPRE Rescue Program is a command-line utility that will scan and clean an infected computer that is so infected that programs cannot be easily run.

The VIPRE Rescue Program is packaged into a self-extracting executable file (.exe) that prompts the user for an "unpack" or installation location, then starts the scanner and performs a deep scan. The user can start the program either by opening it via windows or from the command line.

Virus definitions are included, and the program is self-running once executed. The initial scan, and all subsequent scans, include Rootkit Detection. Four command line options are available, perform a deep scan, perform a quick scan, log the events, and disabling the rootkit.

Detections are consistent with the full VIPRE, and the VIPRE Rescue Program is designed to disinfect a system so infected that a user cannot install VIPRE.
VIPRE Rescue uses our latest engine versions (so rootkit scanning should now also work on 64-bit systems). It also has the ability to do custom scans as well as unquarantine items. Here's a brief overview of some of the most recent changes to VIPRE Rescue.

An important change is that the scanner will do a deep scan with logging enabled by default (even without running the .bat file). This means that some of the commands needed to be changed as well. Here is a list of all the new commands:

Note: VIPRE Rescue is updated very regularly with the latest definitions. When you need VIPRE Rescue, always first come to this site and download the latest version.

Download VIPRE Rescue
C:\VIPRERESCUE>viprerescuescanner /help
VIPRE Rescue Scanner v6.0.14.0
Copyright (c) 2012 GFI Software. All rights reserved.

Copied 32-bit rootkit engine driver to system folder.
Copied 32-bit boot time cleaner to system folder.

Usage: VIPRERescueScanner.exe [options]
/quick - Perform a quick scan (default is deep scan)
/nolog - Disable logging (default is enabled)
/norootkit - Disable rootkit engine (default is enabled)
/path - Scan a specific path
/qlist - List quarantined items
/restore - Restore quarantined items
C:\VIPRERESCUE>

The first three options are obvious but it would be good to know how to use the last three. For the /path option allows you to do a custom scan of a specific location. You just need to type:

C:\VIPRERESCUE>Viprerescuescanner.exe /path C:\examplefolder

The /qlist option will display a list of all items that are in quarantine and assign a number next to them; 1, 2, 3, etc.

The /restore option allows you to restore the files that are in quarantine. You will need to specify the number of the item in quarantine you want to restore. Example:

C:\VIPRERESCUE>Viprerescuescanner.exe /restore 2

Directions for Windows

  1. If you are able, download the rescue program to the infected computer, otherwise download the VIPRE Rescue Program onto a USB drive or some other removable media.
  2. Plug the media into the infected computer.
  3. Navigate to the directory that contains the VIPRE Rescue Program.
  4. Double-click on viprerescue.exe
  5. At the prompt, "Do you wish to extract the VIPRE Rescue Scanner to your computer?" click Yes.
  6. You will be prompted for a destination folder to unzip to. Keep the default (C:\VIPRERESCUE) or enter a new folder, then click Unzip. Make sure the checkbox for "When done unzipping open: .\deep_scan.bat" is checked.
  7. The VIPRE Rescue Program will download the files into the destination folder. Click OK at the prompt.
  8. The VIPRE Rescue Program will open a command line window and run a deep scan.

Directions for Command Line:

  1. Boot the computer in "Safe Mode with Command Prompt" (press F8 when the computer starts to boot. When the boot screen appears, use the down arrow to highlight the selection).
  2. When the command line appears, navigate to the directory or removable media that contains the VIPRE Rescue Program (viprerescue?????.exe).
  3. Type "viprerescue.exe" at the command prompt.
  4. At the prompt, "Do you wish to extract the VIPRE Rescue Scanner to your computer?" click Yes.
  5. You will be prompted for a destination folder to unzip to. Keep the default (C:\VIPRERESCUE) or enter a new folder, then click Unzip. Make sure the checkbox for "When done unzipping open: .\deep_scan.bat" is checked.
  6. The VIPRE Rescue Program will download the files into the destination folder. Click OK at the prompt.
  7. The VIPRE Rescue Program will open a command line window and run a deep scan.

Performing Additional Scans:

  1. Navigate to C:\VIPRERESCUE (or the directory VIPRE Rescue Program was installed into).
  2. At the command prompt, enter: "VIPRERescueScanner"
  3. Use one or more of the following command line options:
    No command line option: Deep Scan with Rootkit and logging enabled
    /quick - Perform a quick scan (default is deep scan)
    /nolog - Disable logging (default is enabled)
    /norootkit - Disable rootkit engine (default is enabled)
    /path - Scan a specific path
    /qlist - List quarantined items
    /restore - Restore quarantined items
If logging is enabled, results can be found in the C:\VIPRERESCUE directory and are stored in an .xml file. The program files can remain on your computer, and will not interfere with the normal operation of VIPRE. The computer must be able to boot before you can run this program.