To be fair OSForensics is probably one of the best. Always best to create a forensic image of the drive/device in question first and then perform the restoration on that – leaving the original in a state that can then be recovered again if needs be.
I have also tried pandora recovery and to some extent its good but you need to be very cautious. Well there are some ways as well to recover your data like – you need to Identify the Breaches and use Legal Defense mechanism. For more detail about different way to recover from a cyberattacks, follow this article – http://gotowebsecurity.com/4-ways-recover-cyberattack/