Abstract: A secure backup application executing on the computing device routinely backs up files on the device to a cloud backup server. Prior to backing up a particular file, the secure backup application performs a malware detection scan on the file to determine whether the files are malware. If a file is malware and cannot be cleaned, then the file is not backed up. Similarly, the secure backup application performs a malware detection scan on files that are being restored to a computing device from the cloud backup server. If a file retrieved from the cloud backup server is determined to be malware, then the secure backup application prevents the file from being fully restored and quarantines or expunges the file from the computing device.