Page 1 of 1

Recovering previous versions of deleted files

Posted: Fri Sep 08, 2017 4:06 pm
by mbeda
Hello,
Many files at a separated partition have been encrypted by a ransomware. When I try to recover the previous versions of these files using R-Studio, it executes one at a time, and I don't know why the result exibits files that are unrelated to the original.
Does anybody knows the correct procedure for recovering previous versions of deleted files and, if possible, in batches?

Thanks for any help

Re: Recovering previous versions of deleted files

Posted: Sun Sep 10, 2017 11:10 am
by Data-Medics
Most of the files are likely to be overwritten unless there are shadow copies that weren't nuked by the virus. And even if there were back versions it's usually limited to the last few Gb of deleted/encrypted files. Very few people set their versioning to 50% hard drive space. Default I think is 5%, so that's the max disk space used for versioning.

Re: Recovering previous versions of deleted files

Posted: Mon Sep 11, 2017 5:45 am
by Alt
New ransomware deletes unencrypted versions of encrypted files properly - they actually wipe them out.

Re: Recovering previous versions of deleted files

Posted: Wed Sep 13, 2017 1:40 pm
by mbeda
Thanks for help. These files hadn't a shadow copy. Despite this I'm having success on recovering some deleted files (orginal files not encrypted) with the R-Studio's previous version lookup resource, but only one at a time. Is it possible to restore previous versions of files through a folder or group of files?

Re: Recovering previous versions of deleted files

Posted: Thu Sep 14, 2017 1:24 pm
by Alt
mbeda wrote:Thanks for help. These files hadn't a shadow copy. Despite this I'm having success on recovering some deleted files (orginal files not encrypted) with the R-Studio's previous version lookup resource, but only one at a time. Is it possible to restore previous versions of files through a folder or group of files?
The problem is that it's hard to find which alleged previous versions of encrypted files are real.

Re: Recovering previous versions of deleted files

Posted: Wed Sep 20, 2017 10:41 am
by mbeda
Ok Alt.
thanks for help!
Mauricio