Call us — 0191 406 1051
Mon–Fri · 9am–5:30pm · No fix, no fee
Start a free diagnostic →
/ home / services / virus & malware
Data loss · virus & malware

Virus or malware? We can recover your data.

Viruses and malware may ruin your files by corrupting, hiding or deleting them, but they rarely destroy the underlying file data. We will recover your files from an isolated copy of your hard drive, solid state drive (SSD), USB flash drives or memory cards and deliver them to you, virus-free and cleaned in-house.

£300 + VAT
Most jobs — only pay if we recover your data
Returned malware-free
!

Stop using the infected device.

If you continue to use the infected drive, the malware could cause further corruption or deletion of your data and potentially transfer from that machine to others. Avoid attempting repeated AV cleanups in the hope that they will resolve the issue, as these can be just as likely to quarantine or delete the files you are trying to recover. Remove the infected device from all other computers immediately, do not connect it, and reach out to us and we will recover your lost data without ever having to run the malware itself.

// what malware does to data

What viruses do to your data.

Typically a virus or malware will not completely erase your data, but rather corrupt it or make it invisible. This is why we are able to recover data in such a high percentage of cases. These are the cases we see most often.

// devices we recover

Every device. Every brand.

Virus and malware recovery is performed by our company on all forms of media as well as all major brands. If the media holds your files, we likely can assist with recovering those files.

SamsungSanDiskKingstonWestern DigitalSeagateLexarCrucialSonyToshibaTranscendPNYVerbatimIntegralADATACorsairKioxiaSilicon PowerHitachiMaxtorTeam Group

Hard drives · solid state drives (SSDs) · flash memory sticks or USB drives · SD, microSD and CompactFlash cards · external drive · portable drive · laptop internal drives, desktop internal drives, Mac internal drives.

// our recovery process

How we recover infected data.

Recovery of a device infected by a malware infection means simply never allowing the malware to run again. We create a forensic image of your device in an isolated environment, recover your files from the forensic image created of your device and then clean and restore them, in the correct sequence.

01

Free diagnostic

Just tell us what occurred. We assess how the malware affected your data (i.e. corrupt, hide, delete) and provide a written quote regarding recovery, usually within 48 hours.

02

Image in isolation

We create a forensic image of your device and do everything necessary to recover your data using only this forensic image, in an isolated environment so that the malware cannot run or infect other devices.

03

Recover your data

We get your files back from the image and take the virus out of the way by un-hiding any shortcut virus hidden files you were unable to access and restoring deleted ones.

04

Repair the file system

If a virus has damaged your file system or individual files we will rebuild and restore them so that you can access your data again.

05

Clean and verify

We also check all of the recovered data for malware and return it clean with all files opening properly and intact.

06

Recover and return

We also provide you with fresh media containing your clean, recovered files. They are organised and ready to be used immediately.

07

Backup Drive or Download

When we finish backing up your files to an external hard drive, we will post them to you. Alternatively, we can provide you a free (up to 75GB) download of your files once they have been backed up.

// what we recover from

Any device. Clean data back.

We provide data recovery services from hard drives, SSDs, memory cards, external drives, USB sticks and other mediums that have been infected with viruses or malware. We do this from an isolated copy of your drive and always return your data clean without ever running the infection on our side.

All media
HDD, SSD, USB, cards
Isolated
malware never runs
Clean return
data scanned safe
48 hr
Diagnostic SLA
1–3
Working days typical
25 yrs
Recovering data
// get a custom quote

Get a custom quote

Tell us what happened and we will get back to you, usually within one working day.

Prefer to call? 0191 406 1051 · Mon–Fri 9am–5:30pm

// pricing

Clear, fixed pricing.

There are no hidden charges or fees for our services and there will be no pressure; only a complimentary diagnostics evaluation and a written quotation prior to starting any work.

Virus & malware data recovery
£300 + VAT
From price for logically recovering infected data.
  • Free diagnostic and written quote
  • In most cases you only pay if we recover your data
  • Clean, recovered files returned on fresh media
// recent recoveries

Infected data. Real recoveries.

Recent virus and malware recoveries across many types of devices. Results are confirmed, names have been removed.

// CASE 2026-041recovered
SanDisk 64 GBUSB stickShortcut virus

USB stick where a virus hid every file behind shortcuts.

Classic shortcut virus. We isolated the stick and took an image of it. Then we made all the files visible again. Finally, we got all the files back to their original form and returned them scanned clean.

// CASE 2026-035recovered
Toshiba laptop drive2.5" HDD · laptopMalware

Laptop that malware corrupted and stopped booting.

System files were damaged but the user’s data remained safe. We extracted everything from the device and gave it back to the customer without the infection.

// CASE 2026-028recovered
WD Elements 1 TBExternal driveAV quarantine

External drive where antivirus had quarantined needed files.

Cleanup removed some critical files (not just malware). We got those files off of our forensic image before they were overwritten.

// sending your device in

Two simple steps.

A free diagnostic can begin once you’ve shipped your device to us. Tell us a bit about how this issue occurred; an engineer will evaluate your device and provide a confirmed written estimate of costs prior to any work being performed.

1

Send us your device

Before you post or drop off your device, please get a quote from us by phone or with the form. Once we receive your device, our recovery process can start. Safely pack your device, include your name and contact information within the packaging and ship it to us. After performing your free diagnostic, we’ll send you a written confirmation of the exact price of our services prior to starting any work.

How to pack it
  • Place the unit into a small sturdy box or a well-padded envelope.
  • It is okay to remove caddies, cables and power supplies since they are not required during the recovery process.
  • Your contact information (name, address, phone number, and e-mail) should be included in the box along with a note that indicates who sent it or by using our shipping form; then close it.
Post toNewcastle Data Recovery
Rotterdam House, 2nd Floor
116 Quayside
Newcastle NE1 3DY
⇣Shipping formPDF · print & include with your devicePDF ↓

If you decide to post it, we would advise using a trackable and insured postal service. Or if you prefer to drop it off, we are open Monday to Friday, 9am to 5:30pm, and you don’t need an appointment. Just pack the unit as described in step one before dropping it off.

2

Need more information?

Would you like a little more background information prior to sending it? Fill in the form to provide more details about your problem; an engineer will evaluate it and reply with a customised quote.

An engineer reviews every enquiry personally — we usually reply within 30 minutes during the day. Prefer to call? 0191 406 1051.

✓

Thanks — your message is in.

We’ll be in touch shortly. For anything urgent, call 0191 406 1051.

// frequently asked questions

Virus & malware, answered.

What we get asked about the most regarding getting back information lost due to a computer virus or malware.

Usually, yes. The majority of malware has been found to corrupt, hide, or delete your files; however, your file(s) will be intact and recoverable. We can then provide you with the recovered file(s), which have been cleaned from any viruses and/or infections, by using an isolated copy of your device.

No. A “shortcut virus” that infects USB sticks, flash drives and memory cards etc., basically makes it look like the file has disappeared, when really it’s just been hidden and replaced with a shortcut, and we can find and recover those missing files.

No. Once we have recovered your data, we run it through an isolated environment, remove any malware, and give it back to you safe from reinfection as well as safe for use on other computers.

Typically no. Malware generally harms the system files required for startup; however, your individual information located on the hard drive remains intact. We retrieve this information directly from the hard drive independently of the damaged operating system.

Yes, frequently. If files are deleted or quarantined in the process of cleaning up your computer, these files may be retrieved as long as they have not had their space written over after removal. Immediately cease use of the device and call us as soon as possible.

When we recover your data, our concern is making sure that your data is safe and that it is returned without malware. To do this, we never run the infected operating system. Instead, we create an image of your hard drive and then scan each file individually. Therefore, when you receive your recovered data back, all of it will be clear of malware.

A virus or malware recovery typically costs at least £300 + VAT for a logical recovery (with a complimentary first diagnosis, and in most cases you only pay if we recover your data). If the device is also experiencing physical failure, we’ll confirm the cost of that additional work in writing before proceeding with the work.

Hard drives, SSDs, USB sticks or flash drives, SD cards, microSD cards, CF cards and external or portable drives as well as those used internally by laptops, PCs and Macs. We can usually help if it has your files on it.

Recovery time from virus or malware varies but most can be done in 1 to 3 working days. Many are faster. Diagnoses usually take less than 48 hours. Priority service can often be arranged. Please contact us.

You may visit our Newcastle office Monday to Friday, 9am to 5:30pm, with your device or post it to us fully insured. Carefully wrap and seal the device when shipping to ensure it arrives safely. Include a note with your complete contact information (name, street address, phone number, and email) so we know who to call and how to schedule recovery services once we receive it. After we receive your item, we will perform the complimentary diagnostic and provide a written quotation prior to starting any recovery services.

// hit by a virus?

Don't keep using it — let us recover it clean.

We offer a free diagnostic, and in most cases you only pay if we recover your data. Virus and malware recovery from any type of drive, USB stick, card, etc., will also be completed and returned clean. Begin recovering your lost data today.