PanicStation.org
UK USA
us Technology & digital loss conflicted copy files • tons of duplicate files overnight • cloud sync conflict copies • onedrive conflicted copies • dropbox conflicted copy • icloud drive conflict copies • google drive duplicate files • sync made many copies • files duplicated while sleeping • unexpected file duplication • shared drive conflict copies • autosave created copies • multiple device sync conflict • version history recovery • cloud restore files • cloud files restore rollback • account compromised signs • suspicious login activity • mass file renaming • possible ransomware file changes • folders suddenly duplicated

What to do if…
many “conflicted copy” versions of files appear across your folders overnight

Short answer

Freeze the situation first: disconnect from the internet and pause OneDrive/Dropbox/iCloud/Google Drive syncing so you don’t generate more copies or overwrite the version you need.

Do not do these things

  • Don’t bulk-delete “conflicted copy” files yet (you can delete the only intact version).
  • Don’t reorganize/move everything into new folders right now (it can break restore/version history paths).
  • Don’t open and re-save lots of files “to check” on multiple devices (that can create more conflicts).
  • Don’t wipe/reset/reinstall yet (you may lose recovery options and evidence of what changed).
  • Don’t plug in backup drives if you suspect malware/ransomware (you could infect the backup).

What to do now

  1. Stop automatic changes immediately.

    • Turn on airplane mode or disconnect Wi-Fi/Ethernet.
    • Pause/quit cloud sync apps on the affected device (OneDrive/Dropbox/iCloud Drive/Google Drive). Staying offline also prevents syncing if you can’t find the pause button quickly.

  2. Capture proof of what happened (before it shifts again).

    • Take screenshots/photos of: the folder view showing “conflicted copy” duplicates, any sync error messages, and the system clock.
    • Note which services and devices were involved, and whether this is personal vs work/school.

  3. Quickly sanity-check for ransomware/compromise signs.

    • Sync conflicts often create duplicates with “conflicted copy”, device names, or timestamps.
    • Higher-risk signs: files won’t open, new strange extensions, ransom notes, or mass renaming/encryption. If you see these, keep the device offline and go to step 7.

  4. From a different “clean” device, secure the cloud account.

    • Change the password.
    • Turn on two-factor authentication (2FA).
    • If available, sign out other devices/sessions and review recent login activity for anything you don’t recognize.

  5. Use built-in conflict and version history tools (avoid guessing by filenames).

    • Use the service’s activity/recent changes view to pinpoint when duplicates started.
    • For a few critical files, use version history to find the last known-good version.
    • If your provider offers a broader restore/rollback feature (restoring your drive/account to an earlier point in time), consider it only after you’ve confirmed the right timeframe and your account is secured.

  6. Make a cautious safety copy before major cleanup.

    • If you don’t see ransomware red flags: copy only your highest-priority folders first to storage that won’t auto-sync (for example, an external drive), then disconnect it immediately.
    • Don’t reconnect that drive until you’ve secured the account and run a reputable malware scan (or had IT check the device), so you don’t keep propagating the same problem.

  7. If you suspect an attack (or this is a work device), escalate instead of experimenting.

    • If it’s a work/school/organization account, contact your IT/helpdesk and tell them: “Many conflicted copies appeared overnight; device is offline and sync is paused.”
    • If ransomware/extortion is suspected, report it to the FBI Internet Crime Complaint Center (IC3) and contact your local FBI field office.
    • Organizations can also follow CISA’s “I’ve been hit by ransomware” guidance and response checklist to structure immediate actions.

What can wait

  • Choosing the “right” copy among hundreds (wait until sync is paused and you’ve checked version history).
  • Running dedupe/cleanup tools or scripts (they can destroy good versions and complicate restore).
  • Resetting your computer or reinstalling sync clients (do this only after you’ve recovered what you need).
  • Re-sharing folders or asking collaborators to resend everything (wait until you know the cause).

Important reassurance

Seeing lots of “conflicted copy” files is often a sync conflict or account/device mismatch—not proof you’ve “lost everything.” The most protective move is to stop syncing first so you can recover calmly using version history and restore tools.

Scope note

These are first steps to prevent further loss and keep recovery options open. Full recovery—especially if multiple devices/services are involved—may need careful review or professional IT support.

Important note

This is general information, not legal or professional advice. If you see signs of ransomware or a targeted compromise, prioritize isolation and qualified help over DIY fixes.

Additional Resources
Support us