Want to remove Gandgrab ransomware? Try these solutions

Reading time icon 4 min. read


Readers help support Windows Report. When you make a purchase using links on our site, we may earn an affiliate commission. Tooltip Icon

Read the affiliate disclosure page to find out how can you help Windows Report effortlessly and without spending any money. Read more

Key notes

  • Some Windows 10 users claimed that their PCs have been infected with the Gandgrab ransomware.
  • You should perform a deep scan of your PC using a trusted security solution.
  • Enable the Ransomware Protection feature on your PC to avoid further problems.
  • Perform a system restore by following our step-by-step guide below.
remove Gandgrab ransomware

Ransomware in any form is among the most dreaded malware that can infect your PC, and in today’s article, we’re going to show you how to remove Gandgrab ransomware from your computer completely.

How to remove Gandcrab v5 permanently?

  1. Start your PC in Safe Mode with Networking
  2. Restart PC in Safe Mode with Command Prompt and perform System Restore
  3. Enable Ransomware protection
  4. Backup regularly

1. Start your PC in Safe Mode with Networking

If you want to remove Gandgrab ransomware, you can try starting your PC in Safe Mode by following these steps:

  1. To do that, click on Start and click on the Power.
  2. Now, click on Restart while holding on to the Shift button on your keyboard.
  3. In the page that opens, you will be asked to Choose an Option.
  4. Click on Troubleshoot > Advanced options > Startup Settings.
  5. In the Startup Settings page, click on the Restart
  6. After your PC restarts, press the F5 button on your keyboard to enter Safe Mode.
  7. Your PC will now be running in Safe Mode with Networking.

Next, log in to the account that has been affected by the Gandcrab malware. Now you just have to scan your PC and eliminate ransomware threats with reliable antivirus like ESET Internet Security.

This software will definitely detect ransmoware problems in your system and provide the necessary security to remove them efficiently.

⇒ Get ESET Internet Security

2. Restart PC in Safe Mode with Command Prompt and perform System Restore

If you want to Remove Gandgrab ransomware, some users are suggesting to start your PC in Safe Mode with Command Prompt and then perform a System Restore.

  1. Click on Start > Settings > Update & Security.
  2. Click on Recovery from the options on the left.
  3. Under Advanced start-up, click on the Restart now
    advanced startup remove Gandgrab ransomware
  4. Navigate to Troubleshoot > Advanced Options > Startup Settings. Now click on the Restart button.
  5. When your PC restarts, select Safe Mode with Command Prompt option by pressing the appropriate keyboard key.

Once you enter Safe Mode with Command Prompt, you need to do the following:

  1. Type cd restore and press Enter in Command Prompt.
  2. Next, type rstrui.exe and press Enter.
  3. This will launch the System Restore window. Click on Next.
    system restore main window remove Gandgrab ransomware
  4. Select a date prior to the Gandcrab ransomware infection and click on Next.
  5. Click on Finish button. There will be a confirmation window that pops up seeking your permission to continue. Click on Yes.
  6. Your PC will restart again and will restore all your OS files and settings.

3. Enable Ransomware protection

This solution won’t remove Gandgrab ransomware, but it will help you protect your PC in the future. Windows 10 has built-in Ransomware protection, so be sure to double-check if this feature is enabled. You can do that by following these steps:

  1. Open Windows Defender Security Center.
  2. Here, click on Virus & threat protection from the menu on the left.
  3. Click on the Ransomware protection link at the bottom.
  4. In the Ransomware protection page, the toggle switch for the Controlled folder access should be set to the On position. With that setting, you can be rest assured of your chances of being affected by a ransomware like Gandcrab is reduced to the minimum.
    controlled folder access remove Gandgrab ransomware
  5. Keep the Windows Defender Security Center updated.

4. Backup regularly

This again is something that all PC users should do regularly. This also is the best option if you are dealing with the worst-case sort of a scenario, which is your PC being encrypted and rendered inaccessible to you.

Under the circumstances, it’s best to have all your data restored from the most recent backup you created and get going again.

Here is how you create a backup using Windows 10’s built-in tool for the same. Bear in mind that this solution won’t help you remove Gandgrab ransomware if you’re already infected.

  1. Click on Start > Settings > Update & Security.
  2. Click on Backup from the options on the left.
    Gandgrab backup
  3. Under Back up using File History, click on Add a drive to back up your files to be backed up on another drive. Follow on-screen instructions.

There you go, these are some methods you can use to remove Gandgrab ransomware from your PC. If our solutions worked for you, please let us know in the comment section below.

More about the topics: Ransomware