Backing up on an infected system before starting repair

[cyrilhubert]

I know this thread is overlapping security and backing up. It's very conflicting with different views.
If it's not appropriate pls move to the correct forum. Thanks.

I read it in some forums when a system, PC, laptop or a Netbook is infected causing the Windows system files corruption, slow responding or Not Responding, crashed or freezing all the time.

The malware expert will instruct the person seeking help to backup any personal files and folders before starting any repair using HJT, DDS,OTL to scan for problems and ESET,ComboFix.

1.Should the user back up all the important info before starting any repair but risking another infection?
OR
2.The user should not backup all the important info until the system is repaired?
What will happen if after the repair, the whole HDD is inaccessible,reformatting is required?
The backup is not done everything is down the sewer.

It's very conflicting.

Thank you.

 

[fireberd]

The first thing is backups should be a procedure that is done at intervals and you should already have either a full hard drive backup or at least the user data backed up. Except for recent files since the last backup you should already have the info.

For those that do not backup (backups are for WHEN they are needed not IF they are needed) the problem is backing up an infected system will usually mean the files backed up are infected. Thus the best option is to try and clean the infected system without backing up.

 

[mariamenounous]

Backup of profiles

Hey!! You can do these steps..

If you want the data, you can restore your system to an earlier date to see if the system and files were not corrupted at that point, if its good then i suggest you copy the files into another disk storage area and run a thorough scan using a good antivirus software , such as Symantec or Nod32. It sometimes best to run the antivirus in safe mode, this allows the antovirus to basically every file in the pc, if satisfied format the original hard drive and reinstall to your OS and hopefully you should be ok.

Restore to a different drive and scan

One alternative is to restore that full backup to a second drive - a drive from which you do not boot your computer.

(Or, alternately, get a new primary drive and simply move the infected drive to secondary.)

You would reformat and reinstall the operating system and applications to the primary drive, and then - once again carefully - copy off only your data files from the secondary drive.

I'd actually suggest running anti-malware scans on that secondary drive as soon as practical simply to remove what malware can be found. This makes having that drive attached to your system that much safer.

I hope you will be able to recover from the problem.

I know this thread is overlapping security and backing up. It's very conflicting with different views.
If it's not appropriate pls move to the correct forum. Thanks.

I read it in some forums when a system, PC, laptop or a Netbook is infected causing the Windows system files corruption, slow responding or Not Responding, crashed or freezing all the time.

The malware expert will instruct the person seeking help to backup any personal files and folders before starting any repair using HJT, DDS,OTL to scan for problems and ESET,ComboFix.

1.Should the user back up all the important info before starting any repair but risking another infection?
OR
2.The user should not backup all the important info until the system is repaired?
What will happen if after the repair, the whole HDD is inaccessible,reformatting is required?
The backup is not done everything is down the sewer.

It's very conflicting.

Thank you.

 

[cyrilhubert]

Thank you for the replies. I should have replied earlier.
Thank you fireberd for telling me backing up an infected system will usually mean the files backed up are infected.
Thank you mariemenounous for telling the alternative ways to backing up an infected system.

 

[Layback Bear]

Any time you do a backup of a infected file you will be taking a chance the backups are also infected.
Infection can be in more than one place on your computer and that includes restore points. Sometimes you can be infected for some time before you even know you are infected so backups you have already made could also be infected.
It would be wise to scan all backups, thumb drives, DVD you or someone else has burnt before you install them on your new clean install. I would also recommend scanning all other drives and partition you might have. Never under estimate the people that create these infection. They are very clever.

 

[cyrilhubert]

Now, I am thinking that those ppl who created these troubles are actually from a state sponsored agency or agencies (two to three countries). Two in Asia and 1 in Eastern Europe who sent agents to kill off their opponents.
Sometimes, we have no choice!