possible virus, backing up files