Case 05272135 Missing Restore point

[MF01]

Hi Folks,
I wonder if so would be to take a look at Case 05272135 for me please.
I deleted some very valuable files accidentally and I desperately need to get them back.
I went to my USB back up drive, and I could see the backup file there via Windows explorer on my second laptop
dated 8th Nov 2021.
Plugged the drive into my original laptop where I deleted the files.
Attempted "File Level Restore" there is only one dir and its subdir that I need back.
It failed saying no backup found on local disk which I couldn't understand as I could see it in explorer.
Then identified that the "Veeam Agent for Microsoft Windows" service was not running.
I started it and the first thing it did was delete the backup file on my USB and started creating a new
backup file. I immediately aborted it, killed it via Task Manager.

I then used Recuva (https://www.ccleaner.com/recuva) to try and recover the deleted Veeam
Backup file on USB drive. It recovered 3 *.vbk on my USB drive, each file is 4GB
.....2021-08-05T074917.vbk dated 05/08/2021
.....2021-08-05T112947.vbk dated 06/08/2021
.....2021-08-06T003053.vbk dated 07/02/2022

The backup I took in Nov is not there, but I suspect it was somehow renamed during the
creation of the new backup in the 7th Feb so I think it is just one dated 07/02/2022.
I am really hoping above all it is.....

File Level Restore says there are no restore points.
IS there anyway please that some one can help me extract the files from any of these backup files please?
I have uploaded the logs etc to the case. I can upload these *vbk files as well if needed.
Please is there any way to get the files back?
I am really at my my wits end to get the files back so would welcome any thing that can be done please

Thank you

[Dima P.]

Hello MF01,

I started it and the first thing it did was delete the backup file on my USB and started creating a new
backup file. I immediately aborted it, killed it via Task Manager.

That does not sound right, can you check if you see new backup job? How the retention and backup schedule is configured in the job? Have you used any other use devices for backup?

I wonder if so would be to take a look at Case 05272135 for me please.

I've asked support team to take a look at your case. Stay tuned!

IS there anyway please that some one can help me extract the files from any of these backup files please?

Any chance you have Veeam B&R Community edition installed elsewhere? Copy the data from the USB drive to a local disk, disconnect the drive, install the Community Edition and try to import the backup files, then start file level recovery from the backup. That might work if the data recovered via third party tool is operational.

[MF01]

Hi Dima,

thank you for your quick reply, very very much appreciated. I started it and the first thing it did was delete the backup file on my USB and started creating a new backup file. I immediately aborted it, killed it via Task Manager.

That does not sound right, can you check if you see new backup job? How the retention and backup schedule is configured in the job? Have you used any other use devices for backup?"

I think I have figured out why this happened but I could be wrong here as I didn't setup/install Veeam on the system and I hadn't looked at what was done.
In the JOB definition under the LOCAL STORAGE the "Keep backups" was set to 7 days, so it seemsas soon as I enabled the "Veeam Agent for Microsoft Windows" service last Mon 7th it decided that backup that was done in Nov was more than 7 days old and started a new backup and deleted the old one.

I have changed that 7 days to 250days for now.

In the task bar icon when I hover over Veeam Agent Control Panel - it says "Job was Cancelled" And "Job is Disabled"
- I am assuming the "Job Cancel" is from when I cancelled it last Mon 7th
- The disable is from me disabling it in the Control Panel, as I didn't want anything to happen while

I was waiting for help to figure out what was best to do.

I haven't used any other devices.

Any chance you have Veeam B&R Community edition installed elsewhere?

On the second laptop there was an "VBK Extract" option it. I ran it on the *VBK Files" that I had copied from the USB drive
and for one dated 7/02/2022 it says "Storage Version [1112687958] is not supported for read-only access"
For the one dated 6/8/2021 it says "Storage Version [538976302] is not supported for read-only access"
For the one dated 05/08/2021 it says "Storage Version [2] is not supported for read-only access"

I have just installed Veeam B&R Community edition on my second laptop.

disconnect the drive, install the Community Edition and try to import the backup files, then start file level recovery from the backup.

I have copied the VBK files to my second laptop and USB is disconnected.
I have done an import as I didn't know how.
I will read up on the link you sent and try it on the second laptop. Thank you.

thank you for asking support to take a look. Greatly appreciated.

[MF01]

Where I said
"I have done an import as I didn't know how."
that should have been
"I have NOT done an import as I didn't know how."
I will read up on the link you sent and try it on the second laptop
Thank you

[MF01]

Hi Dima,

Installed Veeam Backup and Replication on my second laptop, copied the *.vbk files from the USB drive to the local disk.
Tried to import the one of the VBK files and I get the following error
(My Name below is a placeholder for my actual name)
Dir failed storageFilename 'C:\Users\My Name\Documents\MF_Recovery\Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk'
Storage Version [1112687958] is not supported for read-only access
Failed to open storage for read access. Storage: [Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk'
Storage Version [1112687958]
-- tr:Failed to run synchronised operation in MTA backjup apartment.
-- tr:Failed to list items in the Storage [C:\Users\My Name\Documents\MF_Recovery\Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk]
-- tr:Client failed to process the command. Command: [dir]
-- tr:event:3

Storage Version [1112687958] is not supported for read-only access
Failed to open storage for read access. Storage: [Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk'
Storage Version [1112687958]
-- tr:Failed to run synchronised operation in MTA backjup apartment.
-- tr:Failed to list items in the Storage [C:\Users\My Name\Documents\MF_Recovery\Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk]
-- tr:Client failed to process the command. Command: [dir]
-- tr:event:3

Do I have some permissions set incorrectly on the file?
Are the spaces in the directory/filename causing an issue?
OR is there something else wrong?

Thank you.

[Dima P.]

MF01,

Thank you for sharing the updates! I've asked support team, they should proceed on Monday.

Failed to open storage for read access. Storage: [Job Old ThinkPad DESKTOP-6HRGOAP2021-08-06T003053.vbk'

I am afraid that backup file was deleted and when the job started to create a new backup file it wrote the data to the blocks that were 'zeroed' during the deletion. In such case the file you've restored via third party tool might be no longer operational. That's a guess, so lets await for our support team as they may find out more details via debug logs and propose a workaround. Meanwhile please do not delete the restored files or do not write / delete or somehow modify the content of the USB drive in the question. Thank you!

[MF01]

Hi Dima,
Thank you for your reply.
I really hope, pray the support folks can find a workaround... otherwise I will be in tears...
For some reason I cannot log in under the login name I opened case # 05272135 under.
Even when I ask for the reset code to be sent to me it never arrives at my email address.
This login I created for case 05272135 was a temp log in as I couldn't find my original login
details at the time.

I have since found my original login details and I have opened a new case Case # 05278675
under my original / proper work email account.
I have been able to upload the files requested by support to this new Case # 05278675
as I could not upload them to the case 05272135.

I am really sorry for opening two cases but I couldn't find a way to get my log in issue sorted
and I really didn't want to be holding up the support guys.
... please forgive for doing it this way... but I couldn't find another way... sorry.

Thank you again
Michael

[Dima P.]

Thank you for letting us know, I'll pass the info to support team!