Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
Posts: 12
Liked: 1 time
Joined: Jul 24, 2015 4:59 pm
Full Name: Harry Manesiotis

Restore scenario question

Post by harrym » Dec 11, 2015 5:26 pm


Usually setup limited users and restrict access to external hard drive or drives for backup. This is to prevent, say, Cryptolocker infection from having access to the backup drive.

This has not happened yet, but got me thinking. Scenario: If a user has full admin rights, and let's say that Cryptolocker, or a variant encrypts the C:\ProgramData\Veeam\EndpointData mdf databases therein, but the external drive or drives that are not plugged in or part of a rotation that actually contain the backup are intact could recovery still be possible?


Vitaliy S.
Product Manager
Posts: 23858
Liked: 1751 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Restore scenario question

Post by Vitaliy S. » Dec 11, 2015 5:42 pm

You can browse to these backup files from the computer which is not affected by any malware and then do the restore. Alternatively, you can use our recovery media to do the restore from that device as well.

Dima P.
Product Manager
Posts: 11403
Liked: 983 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague

Re: Restore scenario question

Post by Dima P. » Dec 12, 2015 11:44 pm


If your machine gets affected by cryptolocker, I am afraid, not only mdf file but all OS will be locked down - so we consider the backup stored on the USB drive (or any offline storage) in conjunction with Veeam Recovery Media the only possible protection from such threat.

As Vitaliy said using the Bare Metal Recovery feature (don’t forget to create a recovery media) will get you up and running for sure.

Post Reply

Who is online

Users browsing this forum: No registered users and 14 guests