So, how do I restore my C: partition using NG 15.0, from a full system backup? It's become corrupted (I suspect a virus).
When I explore my Recovery Point browser, for one, I notice 'My Documents' is entirely empty! Say what!? In fact, I see other files missing too. So, what is up with that? This doesn't exactly inspire much confidence in your product, to be honest: "Restore your system, lose half your files!"
Please, someone tell me I misunderstood.
Since you say "MY Documents" I assume your using Windows XP?
Where exactly did you look for the my documents folder?
I'm going to reboot and look at a XP image, I don't have ghost installed at the moment.
No, my bad; it's Windows 7; it's the entire 'Documents and Settings' tree.
You won't find it there, It's not like XP. When you said MY documents I thought you were talking about XP. In windows 7 it's just called Documents.
Look in C:\Users\(User Name)\Documents
You may find 2 documents folders, one will not give you access. Replace "User Name" with the real username.
Dave
meimeiriver wrote:No, my bad; it's Windows 7; it's the entire 'Documents and Settings' tree.
meimeiriver,
What folders are present in the recovery point?
Win7 doesn't have a My Documents or a Documents and Settings folder.
It actually does have a folder "Documents and Settings" but it's only there to fool you.
Actually, it's a normally hidden folder and it's for some kind of compatibility or it's a symbolic link or something.
But it doesn't work or contain anything and clicking it will give you a nasty error.
Well I'll be. Yes, it is a Protected OS file.
You guy were right; seems my documents are still there.
Not all files are there, though, elsewhere. For example, I tried to restore:
C:\Users\meineiriver\AppData\Local\Temp\ALSysIO64.sys
Which I thought was a virus, but is actually a driver needed for CoreTemp. don't see that listed in its supposed location.
Also, how should I proceed? Is there a way to verify the integrity of the backup set first? I would hate to see the process abort mid-way, because NG can't proceed for some reason. And should I delete the C: partition? (presumably from the recovery disc), or just overwrite files?
Obviously, I've never done a restore again. :)
Thanks.
Pick your system.
http://community.norton.com/t5/Other-Norton-Products/Ghost-15-options-for-recovery/td-p/218202
Personally, I always make an image of the current system before I restore the system. Unless your backup image was made yesterday or today there may be some stuff you need that is not on the backup image.
So it's up to you, depending on how old the image is and if you have space availible to hold another image.
Then It's just a matter of booting to the recovery disk and restoring the image. If Ghost made the image on that system and the system has not been changed It should already give you the correct options to restore.
To test the image you open it in the recovery point browser and click the button on top to verify.
You need to have the actual image file on the left side selected for the "verify" button to be enabled.
Sorry, like I said I don't have Ghost installed at the moment to check.
Dave
Thanks, Dave.
Making a new image would be pointless, as I'm infected with a worm of some sort (haven't been able to identify it yet, but, for one, it replaces your hosts file with just a single entry in it: 127.0.0.1 www.totalvirus.com). Forunately, my backup was from 2 dys ago, before the infection occured.
Yes, the full backup was created on and for this machine (it resides on a My Book external usb drive). I'm a little scared doing this, though. But it looks like I have no choice,
If it verifies OK then you can stop sweating.
Everyones scared the first time.
Take your time and read that link that Brian posted and if you have any questions, just ask. Especially if you don't have another system you could use.
When I said I make another image, it wouldn't be to restore it, I usually have to go back and extract anything new out of it that was not in the image I restored.
But being that your image is only 2 days old, there shouldn't be much. If you have any recent documents or mail you need to keep from the last 2 days then copy it to your exteranal drive before you begin.
Okay, guys; thanks. I'm gonna try it.
N.B. Unlike so many other support sites, this one is actually pretty good, and very responsive. :) Thanks!
meimeiriver wrote:You guy were right; seems my documents are still there.
Not all files are there, though, elsewhere. For example, I tried to restore:
C:\Users\meineiriver\AppData\Local\Temp\ALSysIO64.sys
Which I thought was a virus, but is actually a driver needed for CoreTemp. don't see that listed in its supposed location.
Also, how should I proceed? Is there a way to verify the integrity of the backup set first? I would hate to see the process abort mid-way, because NG can't proceed for some reason. And should I delete the C: partition? (presumably from the recovery disc), or just overwrite files?
Obviously, I've never done a restore again. :)
Thanks.
You mentioned that you are looking for a file in a temp folder. There are a few files / folders that Ghost does not back up...
...to name a few.
Look at these registry keys...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToSnapshot