December 28, 2009

Does a backup copy the infection, too?

Filed under: Backup, Viruses — Tags: computer, computer recovery, computer repair, computer service, computer services, computer stores, computer support, computers, data recovery, data recovery software, disk recovery, easy recovery, file recovery, hard drive recovery, laptop repair, partition recovery, recover files, recover my files, recovery, recovery software, repair computer — admin @ 8:15 am

The simple answer is “It depends upon your backup routine.” Most of today’s malicious code attacks the average computer in one of three main areas: The operating system, software programs or data files.

So, if you execute a typical backup of only the data files, viruses that affect the operating system or software programs (like a browser) will not be included. Moreover, data infectors are in the minority these days because most of the focus for the very sophisticated cyber-gangs is Internet based applications, such as browsers and operating systems that can spread their infection to other computers on the Internet.

If you believe you have a virus or unruly spyware, the real focus in cleaning up your main system should be on your data. Most important, any backup, even an infected one, is better than no backup.  You can always disinfect the backed up files individually or an entire external hard drive.

So, in most cases, here is a basic plan of attack:

Step #1 – Even if you know you have a virus, backup everything that you care about (data, pictures, music, video, favorites, address books, etc.) to an external hard drive or online backup service.

Step #2 – Disconnect the backup unit or internet connection for online backups. Then, go through the disinfection process on your primary hard drive (the steps will vary depending on the type of malicious code).

Step #3 – Once you have verified that your primary drive is clean and that none of your critical data was corrupted as a result of the cleanup, you have two choices: run through the same cleanup procedure on the external drive or wipe it clean and produce a new backup of your clean system (if you are using an online backup service, deleting the infected files from your backup and backing them up again is the most efficient.)

If program or operating system files become corrupted by the disinfection then reinstalling those items from your original disks will put you back in business, HOWEVER, if your data files become corrupted as a result of the disinfection, don’t perform the same cleanup on your backup drive (consult a professional)!

If all of this sounds too complicated, do yourself a favor and keep your security software up-to-date and keep a regular backup going with redundancy and validation.  If that sounds too complicated, consult a professional!