ugh !
Dont really have much personal experience with such recovery, but there are professional services for this, but my bet is they are expensive (eg,
Here ) ,
The rare times I got such an attack I, thank heavens, was using "Timefreeze" (sandboxing) and which 100% protected me.
For such reason and others (eg, drive failure), always keep current backup(s),
Good luck