Hi everyone, I'm trying to reinstall my Veeam BK server because we recently suffered a ransomware attack and had to remove it. Is it possible to recover the information I have stored in the data domain where the backups are hosted? Without having the configuration file? I only have the license.Thanks.
Solved
Ransomware atack
Best answer by Tommy O'Shea
First of all, if you have support with Veeam I would recommend opening up a P1 ticket with them to guide you through the restore if you need any help.
Also, check to see if your organization has ransomware insurance, and contact them. Then only do as they direct in terms of restoring. They may require you to restore to a different set of infrastructure so that forensics can be completed on the original hardware.
Regarding finding your backups, you can connect the DataDomain to your new Veeam server, and use the checkbox to scan and import existing backups.
After this, you can add your chosen target virtual infrastructure and initiate the restores.
+21Yes you can once you add the storage to the system as a repository and rescan it. You can import the backups located on the device to see them.
+5First of all, if you have support with Veeam I would recommend opening up a P1 ticket with them to guide you through the restore if you need any help.
Also, check to see if your organization has ransomware insurance, and contact them. Then only do as they direct in terms of restoring. They may require you to restore to a different set of infrastructure so that forensics can be completed on the original hardware.
Regarding finding your backups, you can connect the DataDomain to your new Veeam server, and use the checkbox to scan and import existing backups.
After this, you can add your chosen target virtual infrastructure and initiate the restores.
+21Hi
Are you asking to restore your Veeam Server (VBR) back to where it was or restore all your backed up data? If you’re asking about restoring VBR, are you saying you do not have the VBR configuration backup on your data domain? There is no way to restore all your VBR configs without that config backup file. You’d have to manually create/add things.
If you’re asking about restoring your backup data, if it is still on your data domain, then yes...as Chris shared above. When you re-add your repositories, just perform a rescan of them and you should be ok.
https://helpcenter.veeam.com/docs/backup/vsphere/rescanning_backup_repositories.html?ver=120
Definitely follow Tommy’s protocol as well. Before using any backups you have stored, you probably should perform a ‘Scan Backup’ operation to verify they aren’t infected.
https://helpcenter.veeam.com/docs/backup/vsphere/malware_detection_scan_backup.html?ver=120
Hope that helps.
Best.
Thank you all,
I managed to mount the DataDomain, then added the Mtree where some backups were hosted. After performing the rescan, all the backups appeared. Now I'm going to bring up the infrastructure so I can restore them.Thank you very much. I'll send you some screenshots.
+10Please keep us posted
+21No problem
+21Great to see the backups in the console. Hopefully the rest goes well and we are here to assist.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.