Hi,
A friend has been hit by crypto today. Luckily they were able to stop it before it made any massive damage however some shares were still encrypted. They have been running the vSphere Replication Appliance which has been running for a while and I can see in the destination of the replicated servers a load of VMDKs. A main VMDK with todays and a load of delta VMDKs over the last week which I assume are the delta copies of a reverse incremental.
Friend would like to restore the disk only to access the files and for whatever reason the appliance is no longer working since crypto hit.
I have ssh'd into the host and tried the following command to manually recover the disk as recommended by an article I found on recovering the vmdk:
vmkftools -l /vmfs/volumes/Datastore1/ServerA/hbrdisk.RDID-xxxxx.vmdk -d thin /vmfs/volumes/Datastore1/ServerA/recovered/server5.vmdk
However I am getting the following error: Invalid ROR Type.
I am not massively au fait with the command line and googling is not helping so was wondering if anyone had any idea of how to resolve? I just want to create a VMDK of the server as it was yesterday morning which means it will need to be the main VMDK and delta's included.
Hope someone can help and thanks in advance