Shadowprotect - Restore Options Question

Discussion in 'backup, imaging & disk mgmt' started by rolarocka, Dec 11, 2009.

Thread Status:
Not open for further replies.
  1. rolarocka

    rolarocka Guest

    I was trying out Macrium Reflect and did a full backup before with SP.
    While i was restoring with Macrium Reflect i canceled the restore because i didnt want to wait more. I already had made an impression about Macrium.
    So i canceled the restore with Macrium. What are the best options to select in the Restore (with the boot-cd) in SP?

    2009-12-11_153858.jpg

    Should i select all options available? Set Partition Active, Restore MBR, Restore Signature, Restore Hidden Track? Or none?

    I made restores before without setting these options. But now im not sure because i canceled the restore with another product. Looking at the manual seems there is no side effect using all options o_O

    Thank You :)
     
  2. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,425
    Location:
    USA
    I always restore mbr from the image file. This mbr was backed up during the time of image creation.

    Restoring original windows mbr will load the mbr that was installed during a fresh install of windows.

    Restoring disk signature is only needed for servers, so it is not needed in your case.

    Restore hidden disk sector is only needed if you had a hidden track to begin with. Some software utilities create a hidden track and if you do not restore it, that particular software will not work.


    In the end, for typical scenarios, you only restore the mbr from the image file.
     
  3. rolarocka

    rolarocka Guest

    Thank You. I'm going to do that right now.

    :thumb:
     
  4. rolarocka

    rolarocka Guest

    All good.
    One question about the restoring of the MBR.
    If i don't select to restore the MBR from the image, it wont restore the MBR to its original state stored in the image? For example i get a MBR rootkit. If i dont select that option it wont delete the MBR rootkit? Or is that option more interesting while restoring to other hardware, partitions etc.?

    Thank You again.
     
  5. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,425
    Location:
    USA
    That option is for advanced users. Suppose, you have an image that is only a day old and since then you have made some changes to the mbr, but you are confident that even after those changes, the day old OS will boot fine, so in this situation you do not restore the mbr.

    And yes, if you are infected with a mbr virus etc, it will not be overwritten. SP will restore all sectors of the drive/partition except the first sector.

    Like I said, it is an added option for advanced users and most of the time it is preferable to restore the mbr from the image file, if you desire the disk/partition to be an exact replica of that point in time.
     
  6. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,150
    should be the same Mbr image and original mbr or for xp and vista?

    because the recovery cd is based on vista
     
  7. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,425
    Location:
    USA
    The mbr in question is the mbr on your disk. If it XP's mbr, SP will restore that mbr. If it is Vista's mbr, SP will restore that.
     
  8. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,150
    yes thanks
    i mean

    should be the same of mbr
    i don't see different between
     
  9. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,425
    Location:
    USA
    mantra,

    It will be same if your current mbr is the same as windows original mbr. For example, if you have installed a software that has modified your mbr, to work properly and then if you restore the original windows mbr, that particular software will not work.
     
  10. rolarocka

    rolarocka Guest

    Wow i didnt know that. I thought that a full restore from a full backup would be in fact a full restore with a (clean) MBR. Thats very interesting and scary at the same time...
     
  11. Raza0007

    Raza0007 Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    1,425
    Location:
    USA
    Most backup utilities do not even provide you with options like SP. They will simply restore the mbr that was recorded at the time of image creation, by default. In that case, if you believe that particular mbr was infected, you can restore the original windows mbr by using that option from within your backup utility separately, or by using the windows installation disk.

    SP provides you this option before the restore process even begins.

    Also, if you image your system when it was infected, regardless of the fact that the infection was in the mbr or system files, and you restore that image, you will restore the virus too. This is the default behavior of all sector based imaging utilities.
     
  12. rolarocka

    rolarocka Guest

    All clear.
    Thanks
     
  13. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,049
    Since I have only one partition, I always select all the options.

    Make active, restore mbr from image, restore disk signature and restore track 0.

    Pete
     
Loading...
Thread Status:
Not open for further replies.