How do I restore my data after a ransomware attack?

This article provides a brief overview of how you can restore your data from ElephantDrive after a ransomware attack. 

• Related Article: https://support.elephantdrive.com/hc/en-us/articles/218038698-How-Can-ElephantDrive-Help-Me-If-I-Were-Infected-by-Ransomware-

It is important to understand what happens to your data in ElephantDrive when your original files are locked by ransomware. 

• The ransomware encrypts your files (locking them) and ultimately renames them with a different file extension. 
• The result of the file name changing will prompt ElephantDrive to "archive" the file in your ElephantDrive account. 
• Your archived files/folders will serve as the clean backups of your data and can be restored by configuring a restore job. 

Steps to Configure a Restore Job

1. Login to our user web portal, http://vault.elephantdrive.com/account/login.aspx.
2. Navigate into the Files tab and right-click a folder and select "restore folder."
3. Select the destination device. (ElephantDrive must be running on the destination device in order for the restore to work.) Click "Next" to configure restore settings.
4. View https://support.elephantdrive.com/hc/en-us/articles/1260806193170-Overview-Restore-Settings for an overview of the restore settings. Most importantly, please select to include archived files and the "most recent" for the point-in-time setting.  
5. Manually restart the ElephantDrive client. Your restore job will start after the ElephantDrive client is manually restarted at your destination device.