FAQ — Data Recovery
Data recovery FAQ: answers to your questions
Find answers from our specialists to the most frequently asked questions about data recovery: hard drive failures, SSD, RAID, USB drives, pricing, turnaround times and process. SOS Data Recovery (Tesweb SA), Swiss specialist since 2006 with over 10,000 cases handled, answers your questions.
10,000+ cases handled since 2006
CyberSafe certified & nFADP compliant
Free diagnostic within 3 hours
Why consult our data recovery FAQ?
Our technicians answer the most frequently asked questions about hard drive, SSD, RAID, NAS, USB drive and memory card failures. Each answer is based on over 10,000 cases handled since 2006 and regularly updated. If you cannot find the answer to your question, contact us — free diagnosis within 3 hours.
What to do immediately after detecting a ransomware attack?
The first few hours are crucial to limit the extent of the damage. Here's the emergency procedure:
- Isolate infected machines — immediately disconnect from the network (Ethernet cable and Wi-Fi) to stop lateral propagation
- Do not restart systems — some encryption keys remain in RAM and can be extracted while the system is running
- Preserve traces — do not modify any system files; these elements are essential for forensic analysis
- Identify the ransomware — upload an encrypted file to ID Ransomware (id-ransomware.malwarehunterteam.com) to identify the family
- Evaluate your backups — check if your offline or cloud backups are intact
- Contact a specialist — an incident response expert can intervene in less than 2 hours