Windows 7 Backup Fails to Start

Golden said:

According to the system sweeper log, you still have a malware infection:

Resource Path:E:\Users\Public\Downloads\SuperGameHouseSolitaire3.exe->(nsis-6-ghsol3.exe)
Result Count:1
Threat Name:Trojan:Win32/Malat
ID:2147625421
Severity:5

What confuses me is how ESET let that through. You need to get rid of this infection before you attempt to tackle anything else. Try using Malwarebytes to do that.

Here is some information on Malat:

Trojan:Win32/Malat is a generic detection for malware that exhibits explicit forms of malicious behavior.

Malware detected as Trojan:Win32/Malat may display a combination of the following behaviors:

• Downloading and executing arbitrary files
• Modifying protected system registry values
• Hiding in protected operating system locations
• Creating remote threads in external processes
• Dropping files to the System folder
• Modifying the Windows Hosts file
• Connecting to a specific IRC server and channel and awaiting commands from a remote attacker.

If you look at the end of the log you will see:

Resource action complete:Removal
Schema:containerfile
Path:\\?\E:\Users\Public\Downloads\SuperGameHouseSolitaire3.exe
Threat ID:2147625421
Resource refcount:1
Result:0
Finished threat ID:2147625421
Threat result:0
Threat status flags:0
Finished threat actions
End time:Tue Oct 11 2011 00:35:41
Result:0
Standalone System Sweeper Log, (c) 2006
Stopped On Tue Oct 11 2011 00:42:49 (Exit Code = 0x0)

Threat was removed.

Anyway, I restored the system to the factory state and am in the process of installing programs, etc.

Many thanks to all who helped, Jim

Golden said:

Oh well picked up. Did you work out how it got past ESET, and whether it modified some of you system files?

I agree with the others - time for a clean install.

I am not sure it was a real trojan. The container file was most likely installed in April or May of 2010. But, there was no problem that I was aware of until the beginning of this thread. I definitely think something was broken in the system although various diagnostics turned up nothing. The failure of Windows Backup to detect drive "D" and the failure of USB sticks to show up in Windows Explorer and the failure of the system to install drivers was enough for me to give up and do a restart from scratch.

The Puget Custom PC came with an image to restore to the original state. Windows Update at first had about 90 updates, but I couldn't tell if SP1 was included. So I manually installed SP1 and followed with about 30 updates via Windows Updates. I am now installing important programs, etc.

Thanks again for all of the help, Jim

Layback Bear said:

After installing updates check again. If Windows Update finds that no more updates are needed your okay. Well if isn't a rear trojen it sure does act like one and that's all that counts. Happy computing.

Yes, I went through about four Windows Update cycles before there were no updates left. The reason I have some doubts about the trojan is because of the time lapse between "infection" and symptoms.

Recovery is going well, easier than I expected.

Thanks again, Jim