If you’ve just deleted an important file, or a computer has started clicking, freezing or refusing to boot, the most important thing is simple: stop using the affected device and don’t try anything drastic. What you do in the first hour often decides whether your data comes back easily, comes back with professional help, or doesn’t come back at all.
This guide walks you through the calm, practical steps for the most common situations Sydney small businesses run into, plus the well-meaning mistakes that make things worse.
Step one: stop, breathe and stop writing to the drive
When a file is deleted, the computer usually doesn’t wipe it straight away. It simply marks that space as available. Every new thing you save, install or download could overwrite the very data you’re trying to get back.
So, as soon as you notice the problem:
- Stop saving files to the affected computer or drive.
- Don’t install recovery software onto the same drive you’re recovering from.
- If a drive is making unusual noises (clicking, grinding, beeping), turn the device off and leave it off.
- Write down what happened and when. It helps whoever ends up recovering the data.
Check the easy places first
Plenty of ‘lost’ files are just a few clicks away. Before you panic, check these.
The Recycle Bin or Bin
On Windows, open the Recycle Bin; on a Mac, open the Bin. Right-click the file and choose Restore. Note that files deleted from USB sticks and some network drives often skip the bin entirely.
OneDrive, SharePoint and other cloud storage
If your files live in Microsoft 365, Google Drive or Dropbox, deleted items usually go to a cloud recycle bin and are kept for a limited period. In OneDrive and SharePoint there’s also a second-stage recycle bin that a site administrator can access. Cloud services also tend to keep version history, so if a file was overwritten rather than deleted, you can often roll it back to an earlier version.
Previous versions and local backups
Windows File History and Mac Time Machine can restore older copies of files and folders if they were switched on. If your business has a backup system, now’s the time to use it, ideally with help from whoever manages it, so a restore doesn’t accidentally overwrite newer work.
If the drive itself is failing
Hardware failure is a different beast. A dying hard drive can get worse every time it spins up, and repeated attempts to ‘just get it going again’ can turn a recoverable problem into a permanent one.
Signs of a physical problem
- Clicking, grinding or buzzing sounds
- The computer can’t find the drive, or asks to format it
- Extremely slow file access or constant freezing
- The device was dropped, overheated or got wet
What not to do
- Don’t keep rebooting to see if it fixes itself.
- Don’t open the drive. Hard drive internals are extremely sensitive to dust and handling.
- Don’t run disk repair tools such as CHKDSK on a failing drive. They’re built to fix file system errors, not save your data, and can make recovery harder.
- Don’t freeze it, tap it or try home remedies found online. Monsters love a good myth, but your data doesn’t.
If a laptop has had a drink spilled on it, switch it off and unplug it straight away, don’t try to power it on to ‘check’, and don’t speed up drying with a hair dryer. Get it looked at as soon as possible.
This is the point to call in a professional data recovery service rather than experimenting. The fewer things that have been tried, the better the odds.
A note on SSDs
Most modern laptops use solid-state drives (SSDs) rather than spinning hard drives. SSDs are faster and more robust, but they often clear deleted data automatically in the background. That means a deleted file on an SSD can become unrecoverable much faster than on an older drive, which is another reason to act quickly and lean on backups and cloud version history.
If you suspect ransomware
If files suddenly have strange extensions, won’t open, or there’s a message demanding payment, treat it as a security incident, not a simple file problem.
- Disconnect the affected computer from the network: unplug the cable and turn off Wi-Fi. Don’t shut it down unless advised, as some evidence can be lost.
- Don’t pay the ransom. The Australian Cyber Security Centre advises against paying, as there’s no guarantee you’ll get your data back.
- Tell your IT provider immediately so they can check whether other devices, servers or backups are affected.
- Report it through the Australian Government’s ReportCyber service.
- If personal information about customers or staff may have been accessed, check your obligations under the Notifiable Data Breaches scheme, run by the OAIC.
When to get help (sooner rather than later)
It’s fine to check the Recycle Bin yourself. It’s a good idea to get help when:
- The file isn’t in any bin or version history
- The drive shows any sign of physical failure
- The data is business-critical, like accounts, client records or contracts
- You suspect malware or ransomware
- A server, NAS or shared drive is involved
Many issues can be assessed quickly over a secure connection, so remote support is often the fastest first step for software-related problems. Physically damaged drives need hands-on attention.
Making sure the next 'oops' is a non-event
Once the dust settles, it’s worth asking: what would have made this a two-minute fix instead of a stressful afternoon? Usually the answer is some combination of:
- Storing work files in the cloud or on a server, not just on individual desktops
- Automatic, tested backups, including at least one copy kept separately from your main systems
- Version history switched on for shared documents
- Keeping an eye on drive health and replacing ageing hardware before it fails
- A simple written plan so staff know who to call and what not to touch
That last point is part of good business continuity planning: knowing in advance how you’ll keep working when something goes wrong, so a lost file or failed laptop doesn’t bring the office to a standstill.
Need a hand right now?
If you’ve lost important files or a drive is playing up, stop using it and talk to us before trying anything else. The Monster IT team can help work out what’s recoverable and get you back on track. Contact us or call +61 405 808 707.
Frequently asked questions
Can I recover a file I deleted from the Recycle Bin?
Often, yes, as long as you stop using the computer quickly. Check cloud recycle bins, version history and backups first. If those don't have it, professional recovery may still work, though deleted files on SSDs can disappear faster than on older hard drives.
Should I run free data recovery software myself?
For a simple accidental deletion on a healthy drive it can work, but never install it on the same drive you're recovering from. If the drive is clicking, freezing or not detected, don't run any tools. Switch it off and get professional help.
My hard drive is clicking. Is my data gone?
Not necessarily. Clicking usually points to a physical fault, and continuing to use the drive can cause more damage. Turn it off, don't keep rebooting, and have it assessed by a data recovery professional.
What should I do first if I think it's ransomware?
Disconnect the computer from the network by unplugging the cable and turning off Wi-Fi, don't pay the ransom, and contact your IT provider straight away. You can also report the incident through the government's ReportCyber service.