Documents & PDFs
PDFs, Word, Excel, PowerPoint and office files that no longer open or return errors.
A document that won't open, damaged photo, corrupt archive or unreadable video? Send your file for a repair attempt. You only pay if a usable result is obtained.
HIT BY A CYBERATTACK? We repair and attempt to decrypt files encrypted by ransomware, using advanced reverse-engineering methods. A memory dump of the infected computer can improve the odds. No guaranteed result: depending on the variant, decryption is often impossible. See the method and limitations →
Every file is different. Recovery possibilities depend on its structure, the type of damage and the data still available.
PDFs, Word, Excel, PowerPoint and office files that no longer open or return errors.
Truncated images, unreadable photographs or files that display incorrectly.
Unreadable, interrupted or header-damaged media files.
ZIP, RAR and 7Z files that can no longer be extracted or contain damaged content.
Database files, creative projects and other professional formats for assessment.
Don't see your format? Submit it for assessment. Repair cannot be guaranteed.
We repair and attempt to decrypt files hit by a cyberattack and encrypted by ransomware. We use advanced decryption methods based on reverse engineering. The outcome depends entirely on the variant involved and, in many cases, a result is simply not achievable.
We review the added file extension, the ransom note you describe and the file structure to judge whether decryption is realistic.
We analyse how the ransomware works to look for a weakness or a usable key. Many variants remain impossible to decrypt without the attackers’ key.
Partly encrypted, truncated or damaged files after the attack: we try to rebuild whatever can be rebuilt.
As long as the infected computer has been neither shut down nor restarted, its RAM may still hold useful material: an encryption key, parts of the ransomware. This does not work for every variant and guarantees nothing. Simplest method (Windows):
If the computer has already been restarted, the chances of finding a key in memory are very low. A full dump is large and exceeds the 100 MB limit of the form: do not use the file field: upload it to a sharing service (Google Drive, OneDrive, WeTransfer…) and paste the link in the “Download link” field of the form. It can contain passwords and personal data: do not share it with anyone else.
Upload your file, we attempt to recover its contents, and you pay only if a usable result becomes available.
Upload the damaged file and describe the issue. No upfront payment is requested.
We assess repair options. Some files cannot be recovered.
If recovery succeeds, a sample or proof of the result may be provided along with the price.
Payment is offered only after a result exists. Once paid, download your repaired file.
Success depends on the type of corruption and the remaining data. We do not promise to recover every file, and we do not require payment before a result is obtained.
Describe the issue in a few words. You will receive a case number and access code to track progress from this page.
One file per request · 100 MB maximum, or a download link for larger files
Use the reference and access code shown after submission.
What to know before sending us your file.
Only sometimes. We try to identify the variant and decrypt or repair the files, but modern encryption without the key or a known flaw cannot be broken. No result is guaranteed and we cannot assess it without examining a file.
It is a copy of the infected computer’s RAM. As long as it has not been shut down or restarted, it may contain an encryption key. Simplest way: do not power the machine off, cut the network, then in Task Manager (Details tab) right-click the suspicious process and choose “Create memory dump file”, or capture the whole memory with a free tool such as Magnet RAM Capture or WinPmem. It does not work for every variant and guarantees nothing. If the file is large, upload it to a sharing service and paste the link in the form.
We never pay ransoms and do not negotiate with attackers. Authorities advise against it: paying does not guarantee your data comes back and funds crime. Isolate affected machines, keep the files untouched, report the attack and check your backups.
Sometimes. Recovery depends on what caused the damage and how much data remains. Files that have been completely overwritten or lost may be impossible to recover.
You can submit PDFs, Word and Excel documents, photos, videos, ZIP or RAR archives, databases and many other formats. Each file is assessed individually.
No. If no usable result is obtained, there is no repair charge. If a result is available, the price is displayed before payment.
Save the case number and access code after submission. If a repair succeeds, you can review the proof and price, then pay us directly; the repaired file can be downloaded once your payment is confirmed.
Files are stored outside the public web directory, and cases require an access code. The service must be deployed with HTTPS and antivirus scanning before it is opened to the public.
That depends on the format, file size and type of damage. A fixed turnaround time cannot be guaranteed before assessment.
Send it for assessment. Pay only if a usable result is obtained.