Before two days i lost all my files LOCKY virus. all my files have been encrypted. I want to know how i will search for shadows copies with recuva. I don't know what name to search in recuva results. I want to find a shadow copy before.
What version of windows, were the shadow copies on the encrypted drive. I've heard mumblings of people using recovery software on rasomware drives, but honestly this may verge more on malware fixing, which we aren't a qualified site for (though we can point you I the way of some if so you wish).
Please go here to the site which deals with all ransomware issues like this.
Read all thread.
Also note
As part of the encryption process, Locky will also delete all of the Shadow Volume Copies on the machine so that they cannot be used to restore the victim's files