Windows 10: Files "Locked" and Cannot Backup or Delete After Malware Incident

Hi, I recently had a malware incident that forced me to restore a system image - however, I failed to realize that restoring the system image would not restore data stored in C:\Users\myname

Once the system image was restored and I realized that I should probably include this Users folder in my daily mirror backup (using FreeFileSync), I ran the backup but 77 files generated a "Cannot Read File" error when trying to back them up. It also says "The file is locked by another process: System."

I may be wrong to think this, but I suspect that the malware that was launched somehow created these unecessary files or locked them down. I would like to delete them if they are not required.

Some of the files are .dat, dat.LOG1, .dat.LOG2, .log, .bin, .edb, .toc, .jfm, .jtx
most are either locked by "System" and/or "Registry". Others are locked by various WindowsApps, System32, or Google Chrome processes.

I'm attaching a few screenshots here... but like I said, there are 77 files so I won't put them all here.
I'm assuming it is recommended to backup the entire C:\Users\myname folder and that this is not normal.
Please advise...





















:)

 

How do I delete registry files?

type in regedit in the search box and press enter. Then from here on, DO NOT TOUCH ANYTHING UNLESS U KNOW WHAT UR DOING!! Go to Hkey_Local_Machine > Software > Then a list of program registry keys will pop up, delete anything that is uninstalled. Make sure u backup the keys unless something goes wrong. To backup, you do: Select a group of keys on the left pane > Right click > Export > name it "whatever.reg" > save it. To import the backup, click the reg file and click "merge"

 

Best way to remove problem Malware

Hi There,

I am trying to remove a bundle of Malware without success.

There is a bundle of listed programs which I try to uninstall through the typical Control Panel effort, but they remain listed there:

Buenosearch Toolbar
MyPC Backup
PC Performer
Speed Test 127
UnknownFile

I was looking at this weblink which provides a 5 step process for Buenosearch alone:
Remove Bueno Search (Removal Guide)

Not sure how much certain guides can be trusted. One of the first things I read was to download Revo Uninstaller, and I've not heard of it so I'm not sure if it's trustworthy..........

 

Backup skipped

Hi Ken,

For us to better isolate your concern, we need additional information. Kindly answer the following questions below:

• Are your backing up files or creating a system image?
  
• Are you getting any error messages?
  
• What troubleshooting steps have you done so far?
  

In the meantime, we suggest deleting the backup you created and create a new one. Click this
article
and follow the steps on how to create a backup.

We'll keep an eye out for your response.