Home / Data recovery / Windows data recovery
Windows serversDeleted files, a disk that shows as RAW, a lost partition, or a damaged virtual disk. We copy the disk first and work on the copy. Your original disk is not touched.
Software problems on disks that can still be read.
Files were removed from a share or a drive. We check the Recycle Bin, Previous Versions and shadow copies first, then scan a copy of the disk.
The NTFS structure is damaged after a crash or a bad shutdown. We repair or read it from a copy of the disk.
A partition vanished or the wrong disk was cleaned. We look for the old layout and restore it where it is still there.
A disk failed or the pool shows as degraded or offline. We copy the members and rebuild on the copies.
A virtual disk will not attach or a VM will not start. We check the checkpoints and repair or extract the data from a copy.
A database is suspect or gone. We look at backups first, then at the data files, and tell you what can be brought back.
An honest view of each situation. It is not a promise: the result depends on your disk.
Tap a box to show only that group.
They can simply be restored. Check the Recycle Bin of every user on the server.
Often brought back with Windows File Recovery or a scan of the disk, if nothing has overwritten them.
The drive clears deleted data soon after deletion. Recovery is often not possible.
This is the best case. Restoring is fast and safe.
Possible only if a Previous Version, shadow copy or backup holds the older state.
Usually the NTFS structure is damaged and the files are still there. We read it from a copy of the disk.
If nothing was written or formatted afterwards, the old partition can usually be found and restored.
Much of the data is usually still there on an HDD. File names and folders may be partly lost.
A full format writes zeros over the disk, so recovery is rarely possible.
A careful copy often saves most of the data. Files on bad areas may be damaged or lost.
We unlock it with your key and then recover like any other drive.
The data cannot be read. We do not break encryption.
The data is usually intact on the other disks. We copy them first.
It depends on which disks failed. A partial recovery is possible, a full one is not certain.
Often readable from a copy. A broken checkpoint chain can mean partial data.
Backups give the best result. Without them, some data can often be saved from the data files.
Without the key, encrypted files cannot be opened. Ransomware often deletes shadow copies. Backups and free decryptors for some known families are the only ways.
Overwritten data cannot be recovered by anyone.
This is hardware damage. It needs a clean-room lab, and we do not do that work. Switch the disk off.
The same six things on every job.
The more the drive is used after the loss, the less is left. Stop at once.
HDDs keep deleted data for a long time. SSDs with TRIM often clear it fast.
Recycle Bin and shadow copies are easy. A full format or a secure erase is not.
A healthy disk is easy. A failing disk must be copied carefully, and parts may be lost.
These beat every tool. Check them first.
A BitLocker drive can only be read with its key.
The same careful order every time.
Stop using the drive. Tell us the Windows version, the disk or RAID type, what was lost and when.
We make an image of the disk and keep the original as it is.
Recycle Bin, shadow copies, File History, Windows Server Backup, and any backup software you use.
We read the copy, repair the NTFS structure where we can, and scan for deleted files.
You get a list of what was found. You check it and choose what to take back.
Files go back over a secure link or to a place you choose. We delete our working copies when you confirm.
Well-known tools, used on a copy of your disk.
If they are on, they are often the quickest way to get a folder back as it was a few hours or days ago.
Microsoft command line tool that brings back deleted files from NTFS, best on a recently deleted file.
Repair partitions and boot records, and carve files out of free space by type. Original file names are lost with PhotoRec.
A well-known tool for NTFS and RAID reconstruction. It can show the folder tree of a damaged disk.
Repairs NTFS errors. We only run it on a copy, because it can change or remove data.
Windows Server Backup, File History and your backup software, if you have them.
Often yes, if the disk has not been written to much since. We check the Recycle Bin, shadow copies and backups first, then scan a copy of the disk. SSDs with TRIM are the hardest case.
Not necessarily. RAW usually means the NTFS structure is damaged, not that the files are gone. Do not format it. We read it from a copy.
No. We copy the disk first and work on the copy, so a mistake cannot make things worse.
Only if you have the recovery key or the password. We do not break encryption.
Often yes, if the file is still readable. We copy it and repair or extract the data from the copy.
It depends. Backups are the best way. If there is none, we look at the data files and tell you honestly what is possible.
It depends on the size of the disk and the problem. Send us the details and we tell you before any paid work starts.
Send the system, what was lost and when. We reply with the next step.