Files are received totally securely.
- Paris +33 1 84 604 112
WhatsApp +33 7 74 77 62 57
- Telephone service from Mon. - Sat. : 8-20 (GMT+1)
WhatsApp +33 7 74 77 62 57
Have your Veeam backups been corrupted or encrypted by ransomware? Can’t restore your backups?
FREE EVALUATION on Veeam cases until NOVEMBER 30, 2024
In the event of Veeam file encryption or corruption, sos ransomware provides you with a collection of proprietary tools to recover your data from servers, virtual machines, backup tapes or other storage media. Our team of experts is available 24/7.
- 130+ Decrypteurs
- Specialized collection of proprietary tools developed to recover data encrypted by ransomware
- Virtual Disk Repair (vhdx vmdk)
- Database Repair (SQL, mdb…)
- Backup File Repair
- All file Repair
- All type supported (NAS, Server, SAN)
- Deleted File Recovery
- Full Tape Support (LTO, DLT, etc.)
- Veeam Toolset (deleted,corrupted, encrypted files)
- All Backup Formats
Files are received totally securely.
We evaluate the level of damage caused by the ransomware.
We process your files using proprietary technologies.
Validate file integrity with our Diagview tool.
We offer flexible service packages to meet your unique needs and budgetary considerations.
- On-call processing
- 365/24
- Dedicated team
- Average processing time of 1 to 3 working days
- Priority processing within working hours
- 1 dedicated engineer
- Average processing time 3-7 working days
- Processing during working hours
- 1 shared engineer
- Average processing time 7 to 14 working days
With over 250+ ransomware cases, we have adapted our tools and processes to achieve success.
Since 2019, we have been developing our tools specifically for recovering data from Veeam backup files.
Our software has been rewritten to process Veeam files even faster. Our emergency service is available 7/7/365
We offer to prove our expertise with a free analysis of a Veeam file of your choice. Just send it to us.
⭐⭐⭐⭐⭐
Databases, VMs and files from corrupted or encrypted Veeam VBK files
Analysis and extraction of Veeam backups, using our proprietary tools
List of files and their status, provided after data recovery
Our business is based on extracting all forms of data: databases, virtual machines, files from Veeam files that have been corrupted or “encrypted” by ransomware.
We can make virtual machines bootable or extract their contents, as required.
Our engineering teams alternate between data recovery missions for our customers and R&D time to improve our internal methods and tools.
In the course of 2019, we began development of our first Backup Recovery tool which repairs VBK files.
At the end of 2023, we will be developing a new Backup Extractor tool.
Faced with the increasing proportion of files encrypted by ransomware, our Backup Recovery tool was no longer effective. We developed a tool capable of analyzing the entire structure of backup files, thus enabling complete tree structures to be restored. We have also developed a feature to make virtual machines bootable for Microsoft Hyper V and Vmware ESXI.
2024 : we develop a new tool to diagnose the level of corruption in a veeam backup file in record time.
Our engineers are constantly working on optimizing code to save precious time, especially in the context of cyber attacks.
A company based in Japan contacted us following a cyber attack. It hosts several e-commerce websites for its customers.
The ransomware encrypted all the customer’s data. The VBK backup file is in Veeam version 9.5. We were also supplied with 8 VIBs (incremental files).
After downloading the VBK file, which contained 7 virtual machines, we found that the files were 750 gigabytes in size.
Within 48 hours, we were able to render the 7 VMs, taking into account all the priorities requested by the customer. Synchronisation between the VBK and the VIB files enabled us to recover data dating from the day before the attack. We were able to make 6 hyper-v VMs bootable in VHDX.
Contacted by a lebanese company a Monday morning, he informed us that all the backups had been destroyed… The disconnected magnetic tapes had been spared, but they were over a month old.
We have downloaded 2 disk images from a Synology RS820+ server in RAID with 2 x 2TB Western Digital Ultrastar DC HA210 disks.
Our customer wants to recover 2 virtual machines of 1 TB each included in a VBK file. We restore 1 Veeam VBK file from the day before the attack with 100% of the priority data.
Our IT partner in Brasil entrusted us with the NAS server of one of his customers who had been the victim of a cyber attack. The server contains a single copy of the Veeam VBK file and a VHDX virtual machine from a Microsoft Hyper-V server.
Initially, we noticed that the file was not structured like the others. After several hours of analysis and comparison with valid files, we have confirmation that the backup was not carried out correctly and that the file generated is therefore very incomplete…
To make matters worse, the hacker group encrypted a large part of the beginning of the file. So we’re faced with a twofold problem.
We have carried out custom development to extract the files. The result will certainly be partial, but we’ve still managed to extract trees and files with the original names. Disk or RAID system failures can damage the backup files stored on these devices. In particular, these failures can occur during the restoration of virtual machines or the synchronisation between completes (VBK) and increments (VBI or VRB). Backup tapes can also be faulty
Configuration errors, manipulation errors (e.g. data overwritten after an incorrect backup restore) or accidental deletion of Veeam files can result in lost backups. We have also encountered users who have formatted backups on LTO tape.
Network outages or connection problems during backup can corrupt backed up files. Incomplete restoration can be a source of corruption.
Ransomware can attack backup systems by encrypting Veeam VBK , VIB or VRB backup files, or backup server partitions. In the absence of sufficient access to the NAS, they often reset it.
Our 10 Gb/s access enables us to be very responsive and fast during exchanges, in the event of remote recovery. Security is our priority: we use the SFTP protocol exclusively for transfers. The integrity of the files is checked on arrival, so you can be sure that the files are 100% identical.
Most of our rescues are done by download. The main advantage: setting up a transfer method is instantaneous. As soon as we receive the first file, we can start working. Setting up is quick and does not require any technical skills.
We can work on : Microsoft Windows: from 2003 to 2022 Linux: Red Hat, Debian, etc. Apple Mac OS X The advantage is that you don't need to download files to start working, but you do need a stable, fast Internet connection.
This FAQ is designed to give you clear, concise answers to the most common questions about restoring from Veeam backups and how we can help.
SOS Ransomware draws on its long-standing expertise, know-how and proprietary software to offer you a unique solution for restoring data from Veeam backup files. Our cutting-edge technology enables us to recover between 80 and 100% of files from a backup, even if they have been corrupted by malware. Our proprietary methods specifically address damaged VBKs, giving you a unique chance to recover your critical data.
As a general rule, our Backup Extractor tool will be able to restore your data within the same timeframe as restoring data from a working Veeam backup.
Of course, this depends on the type and size of the data backed up and sometimes the degree of damage, which can slow down the process.
SOS Ransomware will take all necessary steps to complete the recovery operation as quickly as possible.
With 22 years of research, experience and development in data recovery, our engineers have the skills and tools to rescue your lost data.
SOS Ransomware recovers the contents of Veeam files, typically VMware and Hyper-V virtual machines.
The security of your data is our top priority, and we do everything we can to recover it as quickly as possible.
No, but don’t give up hope! Contact SOS Ransomware now to maximise your chances of recovering your deleted Veeam backup data.
Although there are no universal tools for repairing damaged Veeam VIB files, SOS Ransomware can intervene in many cases using specific tools and techniques.
Cellule d'urgence ransomware
Contactez dès à présent nos experts pour vous accompagner et accélérer votre reprise d’activité.
