Want to remove Gandgrab ransomware? Try these solutions

Ivan Jenic
by Ivan Jenic
Troubleshooting Expert
Download PDF
Affiliate Disclosure

remove Gandgrab ransomware

Ransomware in any form is among the most dreaded malware that can infect your PC, and in today’s article, we’re going to show you how to remove Gandgrab ransomware from your computer completely.

How to remove Gandcrab v5 permanently?

  1. Start your PC in Safe Mode with Networking
  2. Restart PC in Safe Mode with Command Prompt and perform System Restore
  3. Enable Ransomware protection
  4. Backup regularly

1. Start your PC in Safe Mode with Networking

bitdefender remove Gandgrab ransomware


If you want to remove Gandgrab ransomware, you can try starting your PC in Safe Mode by following these steps:

  1. To do that, click on Start and click on the Power.
  2. Now, click on Restart while holding on to the Shift button on your keyboard.
  3. In the page that opens, you will be asked to Choose an Option.
  4. Click on Troubleshoot > Advanced options > Startup Settings.
  5. In the Startup Settings page, click on the Restart
  6. After your PC restarts, press the F5 button on your keyboard to enter Safe Mode.
  7. Your PC will now be running in Safe Mode with Networking.

Next, log in to the account that has been affected by the Gandcrab malware. Now you just have to scan your PC with a reliable antivirus software such as Bitdefender to remove the ransomware.

2. Restart PC in Safe Mode with Command Prompt and perform System Restore

If you want to Remove Gandgrab ransomware, some users are suggesting to start your PC in Safe Mode with Command Prompt and then perform a System Restore.

  1. Click on Start > Settings > Update & Security.
  2. Click on Recovery from the options on the left.
  3. Under Advanced start-up, click on the Restart now
    advanced startup remove Gandgrab ransomware
  4. Navigate to Troubleshoot > Advanced Options > Startup Settings. Now click on the Restart button.
  5. When your PC restarts, select Safe Mode with Command Prompt option by pressing the appropriate keyboard key.

Once you enter Safe Mode with Command Prompt, you need to do the following:

  1. Type cd restore and press Enter in Command Prompt.
  2. Next, type rstrui.exe and press Enter.
  3. This will launch the System Restore window. Click on Next.
    system restore main window remove Gandgrab ransomware
  4. Select a date prior to the Gandcrab ransomware infection and click on Next.
  5. Click on Finish button. There will be a confirmation window that pops up seeking your permission to continue. Click on Yes.
  6. Your PC will restart again and will restore all your OS files and settings.

3. Enable Ransomware protection

This solution won’t remove Gandgrab ransomware, but it will help you protect your PC in the future.Windows 10 has a built-in Ransomware protection, so be sure to double check if this feature is enabled. You can do that by following these steps:

  1. Open Windows Defender Security Center.
  2. Here, click on Virus & threat protection from the menu on the left.
  3. Click on the Ransomware protection link at the bottom.
  4. In the Ransomware protection page, the toggle switch for the Controlled folder access should be set to the On position. With that setting, you can be rest assured of your chances of being affected by a ransomware like Gandcrab is reduced to the minimum.
    controlled folder access remove Gandgrab ransomware
  5. Keep the Windows Defender Security Center updated.

4. Backup regularly

This again is something that all PC users should do regularly. This also is the best option if you are dealing with the worst-case sort of a scenario, which is your PC being encrypted and rendered inaccessible to you. Under the circumstances, it’s best to have all your data restored from the most recent back up you created and get going again. Here is how you create a backup using Windows 10’s built-in tool for the same. Bear in mind that this solution won’t help you remove Gandgrab ransomware if you’re already infected.

  1. Click on Start > Settings > Update & Security.
  2. Click on Backup from the options on the left.
    Gandgrab backup
  3. Under Back up using File History, click on Add a drive to back up your files to be backed up on another drive. Follow on-screen instructions.

There you go, these are some methods you can use to remove Gandgrab ransomware from your PC. If our solutions worked for you, please let us know if the comment section below.


Was this page helpful?
Thanks for letting us know! You can also help us by leaving a review on MyWOT or Trustpillot.
Get the most from your tech with our daily tips
Tell us why!