ShadowCopyView v1.16
Copyright (c) 2016 - 2023 Nir Sofer

Description

ShadowCopyView is simple tool for Windows 10/8/7/Vista that lists the snapshots of your hard drive created by the 'Volume Shadow Copy' service of Windows. Every snapshot contains an older versions of your files and folders from the date that the snapshot was created, you can browse the older version of your files and folders, and optionally copy them into a folder on your disk.

Shadow Copy Viewer

ShadowCopyView vs 'Previous Versions' feature of Windows

Windows operating system allows you to access the 'Shadow Copies' by right-clicking on the file/folder/drive, choosing 'Properties' and then 'Previous Versions'. However, this feature might omit some of the shadow copies. ShadowCopyView displays all of them.
Also, the 'Previous Versions' window doesn't allow you to access copy system files unless UAC (User Account Control) is turned off. ShadowCopyView is executed with full admin rights (elevated process), so you can access and extract any file you need.

System Requirements

This utility works on any version of Windows, starting from Windows Vista, and up to Windows 10. Windows XP is not supported. In order to use ShadowCopyView on 64-bit systems, you must download and use the 64-bit version of this tool.

Versions History

  • Version 1.16:
    • Updated to work properly in high DPI mode.
  • Version 1.15:
    • Added /CopyFile command-line option, which allows you to copy a single file from the shadow copy into the specified filename.
  • Version 1.10:
    • Added command-line options to export the shadow copy list into a file.
  • Version 1.05:
    • Added 'Entry Modified Time' column.
  • Version 1.03:
    • Added toolbar icons for 'Directory Level Up', 'Go To Root Directory', and 'Copy Selected Files To'.
  • Version 1.02:
    • Added new information to 'Attributes' column: 'I' for 'Not Content Indexed', 'E' for encrypted file, 'X' for 'No Scrub File', and 'V' for 'Integrity Attribute'.
    • Fixed the copy feature to copy the date/time of folders and attribute of files.
  • Version 1.01:
    • Fixed issue: On some systems, ShadowCopyView displayed 'error 0x00000001' message if there is no any shadow copy on the system.
  • Version 1.00 - First release.

Start Using ShadowCopyView

ShadowCopyView doesn't require any installation process or additional DLL files. In order to start using it, simply run the executable file - ShadowCopyView.exe
After running ShadowCopyView, the upper pane of the main window displays the list of all snapshots created by the Volume Shadow Copy service of Windows. When selecting a snapshot in the upper pane, the lower pane displays the files and folder of the selected snapshot. You can navigate to a subfolder by double-clicking a folder or pressing the enter key. You can return back to the previous folders by using the 'Directory Level Up' (Alt+Up Arrow) option or 'Go To Root Directory' option (Ctrl+R).
You can also navigate to the desired folder by typing the path (e.g: \Windows\System32 ) in the text-box above the files/folders list and pressing enter.

Optionally, you can also open the selected snapshot in Windows Explorer by pressing F2 (Open In Windows Explorer), but this option will work only if the 'Previous Versions' feature of Windows supports the selected snapshot. Otherwise, you'll get an error message.

Extracting Shadow Copy Files

You can extract/copy files by from a snapshot by selecting files/folders in the lower pane and then pressing F8 ('Copy Selected Files To' option). In the 'Copy Files' dialog-box you should choose the destination folder and then press 'Do it!'. Be aware that if a file or folder is already exist in the destination folder, then ShadowCopyView will not overwrite your files, but it'll copy the files using another name.

Accessing shadow copies with other software

The path displayed under the 'Snapshot Name' column (e.g: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6 ) can be used to access the shadow copies on some other programs. For example, if you specify this path in NirSoft SearchMyFiles utility as the base folder to search, SearchMyFiles will search files inside the specified shadow copy.
You can also use this path to access shadow copies on 7-zip File Manager, However... I found out that on some versions of this tool it fails to access the root folder but it still works properly when specifying a subfolder (e.g: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows )

Command-Line Options

/CopyFile <Shadow Copy> <Source Path> <Destination Filename> This command allows you to copy a single file from a shadow copy into the specified filename.

In the <Shadow Copy> parameter, you can specify the name of the shadow copy (e.g: "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3") , the number of the shadow copy (e.g: "3"), or the volume path of the shadow copy (e.g: "C:\"). If you specify the volume path and there are multiple shadow copies for the same drive, the shadow copy with the latest created time will be used.

In the <Source Path> parameter, you should specify the path of the source filename without drive letter or the shadow copy path, for example: Windows\system32\config\SYSTEM

In the <Destination Filename> you should simply specify the full path of the destination filename, for example: C:\MyFiles\System.dat

Here's some examples:
ShadowCopyView.exe /CopyFile "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy4" "Windows\system32\config\SOFTWARE" "c:\temp\software"
ShadowCopyView.exe /CopyFile "4" "Windows\system32\config\SOFTWARE" "c:\temp\software"
ShadowCopyView.exe /CopyFile "C:\" "Windows\system32\config\SOFTWARE" "c:\temp\software"

/stext <Filename> Save the shadow copy list to a simple text file.
/stab <Filename> Save the shadow copy list to a tab-delimited text file.
/scomma <Filename> Save the shadow copy list to a comma-delimited text file (csv).
/shtml <Filename> Save the shadow copy list to HTML file (Horizontal).
/sverhtml <Filename> Save the shadow copy list to HTML file (Vertical).
/sxml <Filename> Save the shadow copy list to XML file.

Translating ShadowCopyView to other languages

In order to translate ShadowCopyView to other language, follow the instructions below:
  1. Run ShadowCopyView with /savelangfile parameter:
    ShadowCopyView.exe /savelangfile
    A file named ShadowCopyView_lng.ini will be created in the folder of ShadowCopyView utility.
  2. Open the created language file in Notepad or in any other text editor.
  3. Translate all string entries to the desired language. Optionally, you can also add your name and/or a link to your Web site. (TranslatorName and TranslatorURL values) If you add this information, it'll be used in the 'About' window.
  4. After you finish the translation, Run ShadowCopyView, and all translated strings will be loaded from the language file.
    If you want to run ShadowCopyView without the translation, simply rename the language file, or move it to another folder.

License

This utility is released as freeware. You are allowed to freely distribute this utility via floppy disk, CD-ROM, Internet, or in any other way, as long as you don't charge anything for this and you don't sell it or distribute it as a part of commercial product. If you distribute this utility, you must include all files in the distribution package, without any modification !

Disclaimer

The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

Feedback

If you have any problem, suggestion, comment, or you found a bug in my utility, you can send a message to nirsofer@yahoo.com

Download ShadowCopyView (32-bit)
Download ShadowCopyView (64-bit)
Check Download MD5/SHA1/SHA256 Hashes

ShadowCopyView is also available in other languages. In order to change the language of ShadowCopyView, download the appropriate language zip file, extract the 'shadowcopyview_lng.ini', and put it in the same folder that you Installed ShadowCopyView utility.

LanguageTranslated ByDateVersion
Arabic «Mohamed.Bajdouai»25/06/20161.00
Brazilian Portuguese 27/06/20161.01
DutchJan Verheijen29/12/20231.16
FrenchLargo24/04/20201.10
German «Latino» auf WinTotal.de29/12/20231.16
Greek geogeo.gr15/07/20161.01
HungarianTiminoun12/12/20221.15
ItalianStyb03/01/20241.16
Japanese U.G27/10/20191.05
Persian ZendegiyeSabz03/01/20241.16
PolishHightower24/04/20201.10
Russian Alexey Miloserdov10/08/20161.02
Simplified Chinese DickMoore25/01/20241.16
Simplified Chineseccx27/11/20231.20
SlovakFrantišek Fico08/01/20241.16
Spanish David Gil Alviz17/09/20161.02
Traditional Chinese Danfong Hsieh28/10/20231.15
Turkish HARUN ARI29/12/20231.16