Restore scenario question

Backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)

Restore scenario question

Veeam Logoby harrym » Fri Dec 11, 2015 5:26 pm


Usually setup limited users and restrict access to external hard drive or drives for backup. This is to prevent, say, Cryptolocker infection from having access to the backup drive.

This has not happened yet, but got me thinking. Scenario: If a user has full admin rights, and let's say that Cryptolocker, or a variant encrypts the C:\ProgramData\Veeam\EndpointData mdf databases therein, but the external drive or drives that are not plugged in or part of a rotation that actually contain the backup are intact could recovery still be possible?

Posts: 12
Liked: 1 time
Joined: Fri Jul 24, 2015 4:59 pm
Full Name: Harry Manesiotis

Re: Restore scenario question

Veeam Logoby Vitaliy S. » Fri Dec 11, 2015 5:42 pm

You can browse to these backup files from the computer which is not affected by any malware and then do the restore. Alternatively, you can use our recovery media to do the restore from that device as well.
Vitaliy S.
Veeam Software
Posts: 19568
Liked: 1104 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Restore scenario question

Veeam Logoby Dima P. » Sat Dec 12, 2015 11:44 pm


If your machine gets affected by cryptolocker, I am afraid, not only mdf file but all OS will be locked down - so we consider the backup stored on the USB drive (or any offline storage) in conjunction with Veeam Recovery Media the only possible protection from such threat.

As Vitaliy said using the Bare Metal Recovery feature (don’t forget to create a recovery media) will get you up and running for sure.
Dima P.
Veeam Software
Posts: 6261
Liked: 440 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Return to Veeam Agent for Windows

Who is online

Users browsing this forum: No registered users and 14 guests