I have an office that was hit by cryptolocker malware. The reception PC was infected and most of the shared server drive has been encrypted. They are protected by Windows Server backup with two USB drives in rotation.
We've found out the hard way that one of the two USB drives is bad and has no data. The on-site staff had not been rotating the drives daily as instructed.
I have only two recent restore points available. 11/11/14, of which 1/2 of the files were already damaged, and another backup from 11/6/14 which should be good.
In the Windows Backup GUI I see 11/11/14 and 11/6/14 both as having successful backups. Both backups were to USB disk #1. However, when I try to perform the restore, 11/6/14 is not a restore option. That date on the calendar is not bold and I cannot select it.
Do I have any options?