• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1583
  • Last Modified:

shadow copy restore or backup restore.

windows 2012 server

I have been fighting a virus that corrupted .doc , .xls, .pdf file on a company share.

1st issue - when I went to restore from the windows backup backup I could not browse the backup.  it said that it couldn't locate the shadow copies or something to the effect.  I have since ran a backup but now the older backups are not available.  same backup options were used as the scheduled backup just ran it manually.

is there a way to retrieve the older backups?

2nd issue - I started using shadow copies to restore the files and it was going well and I had many version to go back to.  because I didn't know exactly when the virus corrupted the files, I started with the newest one.  unfortunately I had to go back a couple of times to get to uncrorrupted files.  when I did this on the pass that was going to work.  it started running very slow and then was not able to find files and folders.  I found out that during the process the system had deleted the shodowcopies  because of disk space.

Is there a way to retrieve at least the last couple of shadow copies after the system deleted it?
0
MitchS47
Asked:
MitchS47
  • 4
  • 3
2 Solutions
 
Brad BouchardInformation Systems Security OfficerCommented:
1.  This is for Windows Server 2008 R2, so I'm not sure if it still applies, but it's worth a shot:  http://technet.microsoft.com/en-us/library/cc725765.aspx

2.  Unfortunately, the answer to this one is no: http://answers.microsoft.com/en-us/windows/forum/windows_vista-system/can-the-shadow-copy-files-that-are-deleted-by-the/b1353bd8-15b2-4c87-ab7d-8e58a97edb1a
0
 
nealerocksCommented:
#1 Are you doing a full or incremental backup?

#2 You can't retrieve Shadow Copies after they are deleted.
0
 
MitchS47Author Commented:
Brad - note that the backup GUI did not have a restore catalog option and backups are and had been reporting as successful.  I tried the wbadmin restore catalog but had issues when specifying the location.  the backup is located on an iSCSI disk and only shows up in disk management with a disk name and not a drive letter.  so, I can not specify the location of the backup as a drive letter or a UNC which are the only two options according to the help/syntax menu.  suggestions?

nealerocks - I am using windows backup.  it is my understanding that it is basically an incremental forever type of backup. (FIFO, when disk space runs out)  But, the backup in advanced properties is set to full not copy.

thanks both.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Brad BouchardInformation Systems Security OfficerCommented:
so, I can not specify the location of the backup as a drive letter or a UNC which are the only two options according to the help/syntax menu.  suggestions?
I apologize for the elementary question, but can you right click the iSCSI disk and assign a drive letter?  Last I check I could do this on a huge (15 TB iSCSI) drive I had on an AppAssure backup machine.
0
 
MitchS47Author Commented:
it appears that I can however I can't try right now because backup is running.  

I am currently looking at file repair. may have to go that route but I will update either way.
0
 
Brad BouchardInformation Systems Security OfficerCommented:
Please do, thanks.
0
 
MitchS47Author Commented:
I was able to give the iscsi drive a letter without issue.  but I was not able to restore the catalog to get back to the older backups.

unfortunately, I couldn't find a file repair tool that could repair the files.

luckily I had restored all mission critical files before the shadow copies decided to delete themselves and the data loss was minimal.
0
 
Brad BouchardInformation Systems Security OfficerCommented:
luckily I had restored all mission critical files before the shadow copies decided to delete themselves and the data loss was minimal.
Any loss sucks, but I'm glad to hear that you didn't lose it all.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now