Dear Peter,
This is a perplexing problem. I dont know if you remember, but this machine had a LOCKBIT Ransomware attack on 12/2/20.
I have rebuilt all the programs and restored recovered data from deleted backup HDD's using various recovery programs. This took me about 9 months.
I was unlucky that the lockbit encrypted my Novastor Quikstor HDD's, but I had deleted more recent backups only 2 days before the attack. Those were not encrypted,
so I was able to restore data within about 6 weeks of the attack. This machine was my main computer then. I restored the above scenario to a secondary computer and was able to get my acct program data back up and running after about 4 months. I then proceeeded to restore this machine to be usable instead of a boat anchor!!
I have a few more utilities to try to finish restoring Win7 Ult to original condition, so I can install Win 10 or 11. I think I will try Win 10, of which I have a copy, and see if it works.
I do not know if LOCKBIT had anything to do with the inplace upgrade. There were NO encrypted files in Windows folder or Subfolders.
You have been very helpful and thorough. Thank you very much. I have used this site in the past and it has been very helpful. I will continue to contribute donations and
you guys keep up the good work. I will let you know in the next few days the outcome. In closing, I never gave the Ransomeware attackers any money. And for your info,
I was attacked with AV and AntiRansomware software running. I was doing some remote port work at the time and left the computer for a few minutes. During that time
a colleague used the computer and received a msg about a password, and answered the question. It took about 40 minutes for the attackers to randomly encrypt files, esp. EXCEL files. Happy Holidays to you.
Cordially,
Daryl Suther