Recovering from ransomware
Ransomware works by encrypting or deleting your files and, often, anything it can reach that looks like a backup. Backora is built so that the second part cannot happen through the same computer it is protecting.
The agent cannot delete backups
The credentials a computer uses to back itself up can upload and read, never delete or overwrite history. Nothing running on an infected computer, including ransomware with full control of it, can reach into Backora's storage and remove a previous backup.
Versions survive an infection
Because every backup is a separate, verified version, a computer infected today still has yesterday's clean version sitting in its history, untouched by whatever happened after it was made.
Restore to a clean computer
The usual recovery path is to reinstall or replace the infected computer, then restore its last clean backup onto it, rather than trying to clean an infected machine and trust it afterward.
What recovering looks like
Isolate or rebuild the infected computer first, following your own incident response. Then sign in to Backora on the clean machine, pick a verified backup from before the infection, and restore it.
What this page does not claim
- We do not detect ransomware. Backora has no scanner and does not identify an infection for you.
- It does not automatically decide which backup is the last clean one; you choose the restore point, by date, before the incident.
- It does not remove ransomware from a computer. That is a security response step Backora is not part of.
Questions about ransomware recovery
Can ransomware on my computer delete my Backora backups?
No. The machine's own credentials cannot delete backup data; deletion only ever happens through Backora's own retention process after a plan's retention period.
How do I know which backup is from before the infection?
The restore picker shows a calendar of verified backups by date; choose one from clearly before you noticed anything wrong.
Does Backora stop ransomware from running?
No. It is a backup and recovery product, not endpoint security software; use it alongside, not instead of, antivirus and access controls.