C:\VIPRERESCUE>viprerescuescanner /help
VIPRE Rescue Scanner v6.0.14.0
Copyright (c) 2012 GFI Software. All rights reserved.
Copied 32-bit rootkit engine driver to system folder.
Copied 32-bit boot time cleaner to system folder.
Usage: VIPRERescueScanner.exe [options]
/quick - Perform a quick scan (default is deep scan)
/nolog - Disable logging (default is enabled)
/norootkit - Disable rootkit engine (default is enabled)
/path - Scan a specific path
/qlist - List quarantined items
/restore - Restore quarantined items
C:\VIPRERESCUE>
The first three options are obvious but it would be good to know how to use the last three. For the /path option allows you to do a custom scan of a specific location. You just need to type:
C:\VIPRERESCUE>Viprerescuescanner.exe /path C:\examplefolder
The /qlist option will display a list of all items that are in quarantine and assign a number next to them; 1, 2, 3, etc.
The /restore option allows you to restore the files that are in quarantine. You will need to specify the number of the item in quarantine you want to restore. Example:
C:\VIPRERESCUE>Viprerescuescanner.exe /restore 2
Directions for Windows
- If you are able, download the rescue program to the infected computer, otherwise download the VIPRE Rescue Program onto a USB drive or some other removable media.
- Plug the media into the infected computer.
- Navigate to the directory that contains the VIPRE Rescue Program.
- Double-click on viprerescue.exe
- At the prompt, "Do you wish to extract the VIPRE Rescue Scanner to your computer?" click Yes.
- You will be prompted for a destination folder to unzip to. Keep the default (C:\VIPRERESCUE) or enter a new folder, then click Unzip. Make sure the checkbox for "When done unzipping open: .\deep_scan.bat" is checked.
- The VIPRE Rescue Program will download the files into the destination folder. Click OK at the prompt.
- The VIPRE Rescue Program will open a command line window and run a deep scan.
Directions for Command Line:
- Boot the computer in "Safe Mode with Command Prompt" (press F8 when the computer starts to boot. When the boot screen appears, use the down arrow to highlight the selection).
- When the command line appears, navigate to the directory or removable media that contains the VIPRE Rescue Program (viprerescue?????.exe).
- Type "viprerescue.exe" at the command prompt.
- At the prompt, "Do you wish to extract the VIPRE Rescue Scanner to your computer?" click Yes.
- You will be prompted for a destination folder to unzip to. Keep the default (C:\VIPRERESCUE) or enter a new folder, then click Unzip. Make sure the checkbox for "When done unzipping open: .\deep_scan.bat" is checked.
- The VIPRE Rescue Program will download the files into the destination folder. Click OK at the prompt.
- The VIPRE Rescue Program will open a command line window and run a deep scan.
Performing Additional Scans:
- Navigate to C:\VIPRERESCUE (or the directory VIPRE Rescue Program was installed into).
- At the command prompt, enter: "VIPRERescueScanner"
- Use one or more of the following command line options:
No command line option: Deep Scan with Rootkit and logging enabled
/quick - Perform a quick scan (default is deep scan)
/nolog - Disable logging (default is enabled)
/norootkit - Disable rootkit engine (default is enabled)
/path - Scan a specific path
/qlist - List quarantined items
/restore - Restore quarantined items
If logging is enabled, results can be found in the C:\VIPRERESCUE directory and are stored in an .xml file. The program files can remain on your computer, and will not interfere with the normal operation of VIPRE. The computer must be able to boot before you can run this program.