This article provides a brief overview of how you can restore your data from ElephantDrive after a ransomware attack.
- Related Article: https://support.elephantdrive.com/hc/en-us/articles/218038698-How-Can-ElephantDrive-Help-Me-If-I-Were-Infected-by-Ransomware-
It is important to understand what happens to your data in ElephantDrive when your original files are locked by ransomware.
- The ransomware encrypts your files (locking them) and ultimately renames them with a different file extension.
- The result of the file name changing will prompt ElephantDrive to "archive" the file in your ElephantDrive account.
- Your archived files/folders will serve as the clean backups of your data and can be restored by configuring a restore job.
Steps to Configure a Restore Job
- Login to our user web portal, http://vault.elephantdrive.com/account/login.aspx.
- Navigate into the Files tab and right-click a folder and select "restore folder."
- Select the destination device. (ElephantDrive must be running on the destination device in order for the restore to work.) Click "Start Restore Now" to configure restore settings.
- View https://support.elephantdrive.com/hc/en-us/articles/1260806193170-Overview-Restore-Settings for an overview of the restore settings. Most importantly, please select to include archived files and the "most recent" for the point-in-time setting.
* If your restore job does not automatically launch after applying changes, then please manually restart the ElephantDrive client on your device.