Antivirus software exists to remove malicious code; therefore, most of what users lose post-infection will be removed by the cleanup process (as opposed to the malware). Unlike ransomware, there is no encryption that is preventing access to your data; this greatly increases the potential for recovery once you stop using the computer.
Antivirus applications are designed to eliminate threats, including deleting/quarantining compromised files. Should the file(s) be important, recover them before running a cleaner on your computer or at least check the quarantine prior to emptying it.
The majority of data lost post-infection is not directly caused by the malicious code/software itself.
It would also be worth distinguishing these from one another since they are often confused and their outlook varies greatly.
Ransomware uses encryption to intentionally lock users out of their data and hold onto the decryption key. Ordinary forms of malware damage, delete or hide (not display), and use no form of encryption that you can’t bypass. Therefore, traditional methods of recovery work effectively: deleted records can be recovered by restoring them from the file system, and hidden files can be made visible again, etc. Boot structures can be restored.
If you received a ransom demand (you were told to pay money) when your computer files became encrypted, then we are talking about two completely different services, and therefore two separate conversations; please visit our ransomware page. If your files disappeared, cannot be opened, or if your computer will no longer start up because it was infected by malware, then this is the correct page and the chances of recovery are significantly greater.
This order preserves both the data on the drive as well as the physical computer hardware itself.
Any cleaning which occurs is done after taking a copy of the data (the “image”), so the pre-cleaning state is preserved. Files and entries which have been quarantined/deleted may also remain recoverable from that initial image.
All items such as deleted entries restored from the file system, hidden files recovered, boot structures recreated, etc., occur directly to/from the ‘image’ created at the beginning of the restoration procedure, rather than on the original infected computer.
Many times antivirus software places files with infected macros into their quarantine area in a compressed/encoded format. Often these files can be extracted intact.
All recovered files are reviewed prior to their return to ensure that no issue is reintroduced to a clean machine by the same file.
Your recovered files come back on clean media as opposed to being returned on the original damaged drive. It is always our recommendation to replace or perform a full rebuild of the original drive.
Recovery prices are those for standard recovery jobs; there is no additional charge for specialist premium pricing.
The cost for recovering one hard disk drive is from £300 +VAT, whilst the cost for a server, NAS or RAID system is from £500 +VAT. The cost is provided to you in writing once a free 48-hour diagnostic has been completed. In most cases you only pay if we recover your data.
We specialise in recovering your lost files; however we do not sell antivirus software nor provide ongoing IT services. Upon completion of your file recovery, cleaning or rebuilding the computer is then typically a task for your normal IT supplier, and we will be able to inform them exactly what was found so they may take appropriate action.
We will perform a free diagnosis of your device upon receipt, and ask some questions as to what may have occurred, after which one of our engineers will then provide you with an exact written quotation prior to performing any work.
Before dropping off or posting your device please request a quotation either by telephone or using our quotation form. The first step to recover your data is to get the device to us. Please ensure that you pack the device securely, include your contact information and then forward it to us. Once we have completed the free diagnostic of your device we will provide you with your exact price in writing prior to commencing any further work.
Posting it? We would suggest using a tracked and insured delivery method. Want to drop it off? That’s okay too. Monday to Friday, from 9am to 5:30pm is good; no appointment necessary: simply prepare the item as described above.
If you want a few more details first, fill out this form and let an engineer go through it and send you back a custom quote.
We’ll be in touch shortly. For anything urgent, call 01865 593000.
Everything people want to know prior to shipping their hard drive infected with viruses or malware.
Typically like any other deletion: the entry is deleted but the file remains until it is over-written. As quickly as possible stop using the computer after you have noticed you have been hit (because it’s your continued use of the computer that causes you to lose the files).
Many times, and this occurs more frequently than damage done by the malware itself. Before you delete anything check the quarantine folder, since it contains the original files in encoded form. Beyond that, deleted files are recoverable from an image of the drive.
No, and there is much greater potential. Ransomware intentionally uses encryption and keeps the encryption keys. Standard malware either deletes, damages or hides information, none of which involve encryption that you would need to circumvent. If you receive a ransom demand, then you may require our services for something else.
Generally no. While some malicious software will alter the boot structure so you can’t access your computer, all of your data will remain. The drive can be accessed separately (and even copied) and your files can be recovered independent of whether or not you can boot your computer.
Recover first. Antivirus programs will wipe out viruses but will usually wipe out all files (including yours) that have been used by a virus. Make sure to image the drive before running a cleaner.
The cost varies depending on how many drives you want recovered. For a single drive, this is from £300 + VAT. For a server, NAS or RAID system, the minimum price is £500 + VAT. There is no charge for our 48-hour diagnostic, after which the price is fixed in a written quote. In most cases you only pay if we recover your data.
We offer a free diagnostic and pull your files clean off any drive, stick or card that has been infected with a virus. In most cases you only pay if we recover your data. Start your recovery now!