In various places (notably, the English Microsoft Answers forums1), people are quick to note that a Windows machine should not get connected to the internet without any anti-virus software installed. Otherwise, infections are said to happen within minutes by means of built-in security flaws.
At the same time, some anti-virus software is following the current trend of providing only online installers2. These installers are only tiny packages that will download the required installation data on the fly once started on the target machine. Obviously, these won't work without an internet connection.
What is a safe procedure for setting up malware protection on a new PC when I should not connect to the internet before having the malware protection in place, but cannot install the malware protection without connecting to the internet?
1: e.g. in this thread: "A computer should NEVER be connected to the internet for extended periods (i.e., long enough to run a manual check for updates or for Automatic Updates to download/install needed updates) without a valid, fully-updated anti-virus application installed."
2: e.g. Avira's Free Security Suite provides an installer for the suite umbrella control center, from where the single security tools can be installed - but only with an internet connection. Even the offline installer will install something that will remain disabled until you activate its license ... via the internet.