Our company got hit by crypto.
We did not panic, we started restoring data from windows backup along with shadow copy (Server 2008). Everything was well.
Until we found it that one of the folders was fully restored (because shadow copy version we were restoring from was deleted while we are working on it due to space).
We took the backup drives off and mounted them to a hyper-v host to see if fully restoring the server with a system image will allow us to see shadow copies. and nothing.
I was looking into DiskShadow, but i think this lists backup images on a drive not the shadow copies.
My question is: What are my options now? any chance i can get the shadow copies back.
And also, is disk shadow the actual backup or is it the shadow copy versions?
Thanks.