Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hard Lesson - Local Backups


  • Please log in to reply
7 replies to this topic

#1 Jagger280

Jagger280

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:07 AM

Posted 16 March 2017 - 12:47 PM

Recently our company was hit with one of the Ransomware varients out there. When it struck it went after every shared folder and drive on the network that it could find. This included our local backup devices that were attached to our server as well as some of our desktops.

 

We were fortunate to minimize the damage by also having an off site backup. We were basically out one days worth of data. Could have been much worse.

 

We use  iBackup http://www.ibackup.com/p=avmtechservices which was setup by our local support company. While the initial backup took some time to complete because of the number of files on our server it runs great now. Each day only the changed files are copied to the server. After our hit we also took additional steps to backup critical workstations as well.

 

We reformatted our local backups and still run them but we are aware now of how vulnerable they have become to the various threats out there.

 

Based on our support company we are soon going to update our server hardware and will install a tape backup system with a Grandfather, father, son rotation. This will give us 3 layers of backup.

 

The hard lesson we learned from this was that our local backups were not safe from attacks. We were fortunate to have an off site to fall back on. While we did have some pain cleaning the computers and recovering the files through our off site we are at least are running again.

 

This software is priced so that even the home user can afford to have it and configure each computer in your home. It is also scalable for companies so as your sixe needs increase you can add storage when needed.

 

Hope this information helps others out there.

Do your home work and find the service that is right for you and your company there are a few out there.

 

Thanks Everyone this site is an amazing resource!


Edited by Jagger280, 16 March 2017 - 12:48 PM.


BC AdBot (Login to Remove)

 


#2 RolandJS

RolandJS

  • Members
  • 4,519 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:07:07 AM

Posted 16 March 2017 - 06:51 PM

Were those backup drives attached all during the business day?  If so, that was part of the problem.  I disconnect my external hard-drives as soon as the backup process has completed.  There are features, benefits to both The Cloud, off-site storage, local connected/disconnected external hard-drives or external media.  And, each process has potential drawbacks.


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#3 smax013

smax013

  • BC Advisor
  • 2,329 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:07 AM

Posted 26 March 2017 - 12:30 PM

Were those backup drives attached all during the business day?  If so, that was part of the problem.  I disconnect my external hard-drives as soon as the backup process has completed.  There are features, benefits to both The Cloud, off-site storage, local connected/disconnected external hard-drives or external media.  And, each process has potential drawbacks.


Having local backups not connected all the time will help and is generally better in defending against such situations, but it is not full proof. There are many "nasties" (i.e. malware, viruses, etc) that can sit dormant for a while and then get triggered at a later date. So, even if the backup drive (if using an external hard drive for backup) is disconnected, it could still have had the malware, etc copied to it that could then still be triggered at a later date when the drive is attached to the computer and powered up.

This is why using dramatically other types of media, such as tape drives (as mentioned by the original poster) or optical discs or even potentially online services) rather than just external hard drives, when setting up a backup plan can be useful in lowering risk.

Also different types of backups (i.e. whether a proprietary file format or native file format) when backing up to an external hard drive can also help mitigate such situations. If a piece of malware, etc is backed up into a proprietary backup file format, then it likely cannot run until it is restored from the backup file since it is not sitting there as a native file format application that could be trigger to run.

#4 QQQQ

QQQQ

  • Members
  • 379 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:07 AM

Posted 12 April 2017 - 09:25 AM

https://ransomfree.cybereason.com/



#5 RolandJS

RolandJS

  • Members
  • 4,519 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:07:07 AM

Posted 17 April 2017 - 05:29 AM

Jagger, how are the local backups doing now?  Have you seen the current 3-2-1 backup plan on The 'Net?  If yes, what are your thoughts?


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#6 Jagger280

Jagger280
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:07 AM

Posted 19 April 2017 - 12:09 AM

Hello Roland

 

The local backups are going well. We are disconnecting the drive each day and using a different one for the next. 5 Drives total in the local rotation. The local drives are kept in a fire proof vault when not being used. We continue to also perform a daily backup of the changed files to our off site backup which is also working well. As I mentioned we are in the process of replacing our server hardware and will also include a tape backup system in the new setup as well as what we have been doing.

 

I have read the 3-2-1 backup plan and that is basically what we will have when we receive our new hardware. One copy off site, 2 copies on different media and 3 copies of the data in total at any given time. It is a bit of labour for the different media but it is well worth it if you have anything happen to your system, your hardware or your facility.



#7 smax013

smax013

  • BC Advisor
  • 2,329 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:07 AM

Posted 19 April 2017 - 07:51 AM

Hello Roland
 
The local backups are going well. We are disconnecting the drive each day and using a different one for the next. 5 Drives total in the local rotation. The local drives are kept in a fire proof vault when not being used. We continue to also perform a daily backup of the changed files to our off site backup which is also working well. As I mentioned we are in the process of replacing our server hardware and will also include a tape backup system in the new setup as well as what we have been doing.
 
I have read the 3-2-1 backup plan and that is basically what we will have when we receive our new hardware. One copy off site, 2 copies on different media and 3 copies of the data in total at any given time. It is a bit of labour for the different media but it is well worth it if you have anything happen to your system, your hardware or your facility.


If you have 5 backup drives in a rotation, then you are beyond the 3 and the 2 (different media typically just means different devices whether those devices are all external hard drives, a mix of external hard drives and other things like optical discs or tapes).

For many people 5 rotating backups is overkill, but for many businesses it is good practice. It addition to multiple copies of the files, it also is creating "versioning" by default...in your case, effectively 5 days of "versioning". So, technically, if some needs a version of a file that existed 4 days ago, but had since changed, you have that. While not commonly needed, the need to happen on occasion. Which is why many business do rotations of several backups.

#8 RolandJS

RolandJS

  • Members
  • 4,519 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:07:07 AM

Posted 19 April 2017 - 08:56 AM

Agreed!  For most home users, 3-2-1 would be overkill; however, the concepts of onsite/offsite, varying media, backups was what I was mainly pointing to.  Now, for those with home businesses, definitely a big part of 3-2-1 might be a great idea.


Edited by RolandJS, 19 April 2017 - 08:57 AM.

"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users