@GossiTheDog don't all malwares delete all shadow copies or do they actually manage to prevent the malware deleting all the snapshots first?