New
#1
Possible to open "Restore Point" files from "system volume information
Hello!
I've a customer with a vista computer (i know, spare the flame:ing :)) it was infected with crypt0l0cker and after restoring it to a previous restore point it seems like the SAM hives or something broke down on it since i cant create new users and some services isnt working as it should included VSS (so I cant do a new system restore).
So I can't use "system restore" app but the files/snapshots are still present under "system volume information", is there a way to open these files on another computer, to browse them and save some of the files in it?
EDIT: I found a good solution please se my reply further down. (this will work on other systems then Vista)
//BR
Patrik
Last edited by e3345te; 14 Jun 2017 at 14:42.