2
I have Windows 7's Backup configured to run every day at midnight. When it runs per this schedule, no UI pops up. It just runs.
I'm also using Microsoft Security Essentials (MSE). From time to time, it detects malware in some file, and it takes its "recommended action," which is generally to quarantine the file, from what I can tell. When this happens, I don't see any kind of UI notification. It just happens.
The problem is that when Windows 7's Backup tries to backup a file that MSE identifies as malware, the backup fails. Silently. The result is that several days can go by with me thinking I've been backing up every 24 hours, but in fact nothing has been backed up for several days. The only reliable way I've found to detect this problem is to check the Event Log for Event 4104:
The backup was not successful. The error is: Windows Backup failed while trying to read from the shadow copy on one of the volumes being backed up. Please check in the event logs for any relevant errors. (0x81000037).
Checking the MSE History shows that the file causing the problem is part of the shadow copy created by Backup, e.g.:
Security Essentials encountered the following error: Error code 0x80508023. The program could not find the malware and other potentially unwanted software on this computer.
Category: Trojan
Description: This program is dangerous and executes commands from an attacker.
Recommended action: Remove this software immediately.
Items:
file:\Device\HarddiskVolumeShadowCopy45\Users\Bob\_Files\Web Site\Live\foo.html.~16~
This interaction between Windows Backup and MSE has been documented by others (e.g., here and here.)
I realize that I could replace MSE with a different anti-malware product, but I'd frankly settle for finding a way to have either MSE or Windows Backup tell me that something is going wrong. I've checked the options for both, and if there's some way for me to say "Pop up a UI dialog when something fails," I can't find it.
Any suggestions on what I should do? Running backups regularly is only useful if the backups are actually getting created.
The simplest solution would be to create an exception for the folder that contains the Malware and/or clean the files before the backup runs. – Ramhound – 2013-02-06T03:22:43.700
@Ramhound: As I tried to make clear, the backup is failing not on a quarantine directory, but on a normal file that's in the shadow copy. An infected file could occur anywhere. – KnowItAllWannabe – 2013-02-06T04:52:45.320