Windows 7 Backup Fails to Start

[Layback Bear]

60 post and we finely get the information we should of had in post #1. Good work to all that helped. I still think like mjf is thinking; a clean wipe and fresh install.

 

[karlsnooks]

I agree. Time to backup all data dear to your heart and do a fresh install.

 

[hawkeye62]

According to the system sweeper log, you still have a malware infection:

Resource Path:E:\Users\Public\Downloads\SuperGameHouseSolitaire3.exe->(nsis-6-ghsol3.exe)
Result Count:1
Threat Name:Trojan:Win32/Malat
ID:2147625421
Severity:5

What confuses me is how ESET let that through. You need to get rid of this infection before you attempt to tackle anything else. Try using Malwarebytes to do that.

Here is some information on Malat:

Trojan:Win32/Malat is a generic detection for malware that exhibits explicit forms of malicious behavior.​

Malware detected as Trojan:Win32/Malat may display a combination of the following behaviors:​

• Downloading and executing arbitrary files
• Modifying protected system registry values​
• Hiding in protected operating system locations​
• Creating remote threads in external processes​
• Dropping files to the System folder​
• Modifying the Windows Hosts file​
• Connecting to a specific IRC server and channel and awaiting commands from a remote attacker.​

If you look at the end of the log you will see:

Resource action complete:Removal
Schema:containerfile
Path:\\?\E:\Users\Public\Downloads\SuperGameHouseSolitaire3.exe
Threat ID:2147625421
Resource refcount:1
Result:0
Finished threat ID:2147625421
Threat result:0
Threat status flags:0
Finished threat actions
End time:Tue Oct 11 2011 00:35:41
Result:0
Standalone System Sweeper Log, (c) 2006
Stopped On Tue Oct 11 2011 00:42:49 (Exit Code = 0x0)

Threat was removed.

Anyway, I restored the system to the factory state and am in the process of installing programs, etc.

Many thanks to all who helped, Jim

 

[Golden]

Oh well picked up. Did you work out how it got past ESET, and whether it modified some of you system files?

I agree with the others - time for a clean install.

 

[hawkeye62]

Oh well picked up. Did you work out how it got past ESET, and whether it modified some of you system files?

I agree with the others - time for a clean install.

I am not sure it was a real trojan. The container file was most likely installed in April or May of 2010. But, there was no problem that I was aware of until the beginning of this thread. I definitely think something was broken in the system although various diagnostics turned up nothing. The failure of Windows Backup to detect drive "D" and the failure of USB sticks to show up in Windows Explorer and the failure of the system to install drivers was enough for me to give up and do a restart from scratch.

The Puget Custom PC came with an image to restore to the original state. Windows Update at first had about 90 updates, but I couldn't tell if SP1 was included. So I manually installed SP1 and followed with about 30 updates via Windows Updates. I am now installing important programs, etc.

Thanks again for all of the help, Jim

 

[Layback Bear]

After installing updates check again. If Windows Update finds that no more updates are needed your okay. Well if isn't a real trojen it sure does act like one and that's all that counts. Happy computing.

 

[hawkeye62]

After installing updates check again. If Windows Update finds that no more updates are needed your okay. Well if isn't a rear trojen it sure does act like one and that's all that counts. Happy computing.

Yes, I went through about four Windows Update cycles before there were no updates left. The reason I have some doubts about the trojan is because of the time lapse between "infection" and symptoms.

Recovery is going well, easier than I expected.

Thanks again, Jim

 

[karlsnooks]

Jim,
Glad to hear that all is going well so far.

Windows Update is NOT very accurate at times.

Here is a procedure which I wrote which guarantees you that you get all of the update.

Notice that for critical, important and optional updates, you must keep going back to the well until there is no water.

UPDATING YOUR WIN 7
ASSURE THAT YOU RECEIVE ALL UPDATES
WIN | type WINDOWS UPDATE | ENTER |
Change settings (left-hand column) |
checkmark all four of the boxes | OK button

Approve any dialog boxes presented. Let Windows install any update features.

WIN is the key with the Microsoft flag on top.

INSTALL CRITICAL UPDATES
Check for Updates (left-hand column)
Install ALL critical updates.
Restart your computer (even if not prompted)

Repeat this procedure until there are no more critical updates.

DO NOT TRUST the “Windows is up to date” in center of dialog. until you see that TWICE IN A ROW!

INSTALL IMPORTANT UPDATES
Use the “critical update” procedure until all important updates are installed.

INSTALL OPTIONAL UPDATES
Use the “critical update” procedure until all optional updates are installed.

Under Optional updates you will be presented with a list of about 34 language updates.
You can hide those updates so that aren't continually notified of those updates. When you click on 34 optional updates are available, then you
a) highlight all of the language updates,
b) right-click anywhere in the highlighted list.
c) click on Hide Updates,
d) OK button.


UPDATE GOLDEN RULES
Install ALL, yes, ALL updates.
This is Win 7 and not Vista or XP (eXPired).

UPDATE IS HUNG –TAKING FOREVER
Hung is very doubtful unless you interrupted updates.

CTRL + SHIFT + ESC key combo will pop-up the Task Manager.
Lo and behold, Windows Update is still running!

You hold down the CTRL and SHIFT keys.
While holding them down, tap the ESC key once.

 

[Layback Bear]

I have read some where that some virus will have the ability to sit and wait just like when you set up a schedule for Windows to update or schedule a defrag. So the timing (schedule) can be set by the creator of the virus.