PROXMOX BACKUP
Is your Proxmox Backup Server (PBS) backup encrypted after a ransomware attack?
Even when a Proxmox Backup Server (PBS) backup can no longer be restored following a ransomware attack, SOS RANSOMWARE can analyze, reconstruct, and recover your company's priority data. Our R&D engineers use advanced methods to analyze Proxmox Backup Server (PBS) backups, identify data blocks that are still recoverable, and reconstruct the critical files required to resume business operations.
Client Case: SME Based in Brussels (Belgium)
Discover how SOS RANSOMWARE recovered the priority data of a Belgian SME whose Proxmox Backup Server (PBS) backups had become unusable following a ransomware attack.
An SME based in Brussels contacted us through SOS RANSOMWARE after a ransomware attack made several Proxmox Backup Server backups impossible to restore.
The affected backups represented a total volume of 640 GB and consisted of multiple chunk files used by Proxmox Backup Server (PBS).
Total volume analyzed: 640 GB
Client objective: recover the priority data contained in the Proxmox Backup Server (PBS) backups to enable a rapid resumption of business operations.
Secure Transfer of Proxmox Backup Server (PBS) Backups
From the initial contact, our specialists carry out a comprehensive assessment of the situation in order to:
- Identify the source of the problem.
- Assess the actual condition of the Proxmox Backup Server (PBS) backups.
- Determine the technical recovery options.
- Identify the company’s priority data.
To facilitate data transfer, our team provides a secure FTP space, allowing the client to send us all the affected backups.
Once all files have been received, our engineers begin an initial technical analysis to assess their condition.
Conventional Restoration of Proxmox Backup Server (PBS) Backups Was Impossible
An initial attempt to open the Proxmox Backup Server (PBS) backups was carried out using standard restoration methods.
The software then returned an error message confirming that the backups could no longer be restored using conventional procedures.
The backups had become unusable with standard restoration tools.
Advanced Technical Analysis and Data Reconstruction
Since conventional methods could not be used, the analysis was entrusted to our R&D engineering team specializing in post-ransomware data recovery.
The initial checks identified that:
- Approximately 15% of the analyzed segments contained incomplete structures or unreadable data blocks.
- A large proportion of the internal data blocks nevertheless remained recoverable.
- Reconstruction of the backups could therefore be initiated.
Our engineers then carried out a complete mapping of the chunk files to isolate the blocks that were still readable.
An initial extraction of the recoverable data produced encouraging results. A technical discussion with the client then helped identify an additional data source that could improve the recovery rate.
The Brussels-based company subsequently provided us with a production virtual machine to support the analysis.
By cross-analyzing the various available data sources and using specialized tools developed by SOS RANSOMWARE, our engineers were able to reconstruct a large portion of the data.
Results Achieved: 85% of Priority Files Recovered
After reconstructing the recoverable structures, the following results were confirmed with the client:
Recovery Results
- Initial volume analyzed: 640 GB
- Recoverable volume reconstructed: 510 GB
- Overall recovery rate: 80%
- Priority files recovered: 85%
- Client validation: 100%
Validation of Recovered Data
To ensure reliable validation before the data was returned, the recovered data was mounted in a secure environment made available to the client.
This step allowed the client to:
- Review the restored files.
- Verify their contents.
- Check the priority data.
- Validate the results before final delivery.
For File Server data, secure access to our DiagView platform was also provided to make it easier to review the recovered files.
Data Delivered Within 48 Hours
After final validation of the data:
- The recovered files were transferred via secure FTP.
- The data was returned according to the agreed procedure.
- The data was delivered within 48 hours.
This intervention enabled the Brussels-based company to quickly regain access to its critical data and resume operations following the ransomware attack.
Our Recovery Process for Proxmox Backup Server (PBS) Backups
Contact & Qualification Call
Advanced Diagnosis
Fixed Quote
Recovery
File Listing & Validation
Secure Data Return
Why Choose SOS RANSOMWARE to Recover Your Proxmox Backup Server (PBS) Backup?
With over 250 ransomware cases handled, we have adapted our tools and processes to maximize our chances of successful data recovery.
Since 2019, we have been developing our own tools specifically for post-ransomware data recovery.
Our emergency response team is available 24/7. Our software and servers are regularly updated to speed up the recovery process and deliver results faster.
We offer a free analysis of a file of your choice (VM, backup, or database) to demonstrate our expertise. Simply send us the file for evaluation.
How Quickly Do You Need Your Data Back?
We offer flexible service options to meet your specific needs and budget requirements.
On-call service
24/7/365
Dedicated team
Average turnaround time: 1 to 3 business days
Priority processing during business hours
1 dedicated engineer
Average turnaround time: 3–7 business days
Processing during business hours
1 shared engineer
Average turnaround time: 7–14 business days
Témoignages
Success stories
Une sauvegarde ACRONIS cryptée par un ransomware
Un agent immobilier nous contacte après avoir été crypté par un groupe de ransomware.
Ils nous fournissent donc un fichier .TIB de 4 TO.
Nous constations que le chiffrement a touché tous les débuts de fichiers à hauteur de 8 Go.
Heureusement, ils ont coupé le NAS au début de l’attaque. Il ont retiré le disque système du NAS. 4 répertoires seulement sont manquants. Une société de récupération de données fera donc des recherches de fichiers supprimés mais tous fichiers retrouvés sont corrompus.
Nous analysons donc la structure et la compression des fichiers.
Nous avons pu récupérer 95 % des données sur ce dossier.
Une sauvegarde TIBX échoue en raison d'une erreur d'E/S.
Le prestataire IT nous envoie un disque dur qui contient des fichiers de sauvegardes TIBX. Le logiciel indique une erreur “Data error (cyclic redundancy check)” .
Ce message d’erreur indiqu’il y a des erreurs physique sur le disque. Nous procédons donc à un clonage du disque. Le fichier SPF ne fonctionne pas. Il y a des erreurs : il est corrompu.
Nous récupérons plus de 90 % des données malgré les erreurs.
Request an Evaluation
Once we receive your request, we will arrange a technical call with our engineers.
Other Backup Systems We Work With
FAQ
Frequently Asked Questions
Everything You Need to Know About Database Data Recovery Services.
Database data recovery is a technical process used to restore information stored in a database or backup that has become inaccessible, corrupted, or damaged.
Following a ransomware attack, this process involves analyzing the internal data structures to identify recoverable elements, reconstruct files, and restore the priority information required to ensure business continuity.
Oui. Même lorsqu'une sauvegarde Proxmox Backup Server ne peut plus être restaurée avec les outils classiques, nos ingénieurs analysent les fichiers de sauvegarde afin d'identifier les blocs récupérables et reconstruire les machines virtuelles ainsi que les données exploitables.
It is recommended to contact our team as soon as possible after discovering a ransomware attack to maximize the chances of successful data recovery.
A technical analysis allows us to assess the condition of the backups and determine the most appropriate recovery strategy.