It’s all fun and games until ransomware deletes the shadow copies