Ransomware Removal and Recovery
Locked out is not the same as lost.
Ransomware scrambles your files and demands money to unlock them. It is frightening, and it is meant to be. Stay calm: there is a right order to do things in, and we can take you through it.
What to do first
- Disconnect the computer from the internet and from any network.
- Unplug external drives and backup drives.
- Do not delete anything, and do not reinstall Windows yet.
- Do not pay in a hurry. Payment does not guarantee you get your files back.
- Photograph the ransom message and call 020 7237 6805.
What we do
- Identify the ransomware and how it got in
- Remove it completely, so it cannot return
- Recover files from backups, earlier versions and, where one exists, a known decryption tool
- Rebuild the computer cleanly and close the gap it came through
- Set up a backup, so it cannot hurt you like this again
Related pages
Questions
Can every encrypted file be recovered?
Not always, and we will not pretend otherwise. It depends on the ransomware and on what backups exist. We tell you honestly what is possible.
Should I pay the ransom?
We advise against it. It funds the criminals and there is no guarantee. Talk to us first.
We are a business. Can you help quickly?
Yes. Call 020 7237 6805 and tell us it is ransomware.
Let us take a look
The assessment is free, the price is fixed before we start, and every repair carries a 3-month warranty. Call 020 7237 6805, or tell us what is wrong and a technician will reply.