• Anatova ransomware is a dangerous form of cyber attack that targets local files on your PC as well as shared resources on your network.
  • While ransomware is often difficult to remove, Anatova can be removed easily by following a few simple steps.
  • Check out our Ransomware section to learn more about this type of cyber attack.
  • Visit our Security & Update Center to learn more about how to keep your PC safe.

How To Remove Anatova Ransomware From Windows 10 PC

To fix various PC problems, we recommend DriverFix:

This software keeps your drivers working and protects you from common computer errors and hardware failures. Check all your drivers now in 3 easy steps:

  1. Download DriverFix (verified download file).
  2. Click Start Scan to find all problem drivers.
  3. Click Update Driver Software to get new versions to avoid system crashes.
    DriverFix was downloaded by 538,710 readers this month.

Today, cyber attacks are becoming more common and there are no signs of stopping them any time soon. Not without a good strategy, though.

For example, Anatova ransomware is a popular attack (in its infamous form) that hit several machines in 2019.

This ransomware was first discovered on a private peer-to-peer network by McAfee security researchers.

The researchers studied the out-of-the-box modular distribution of the ransomware and warned users of its potential to become a serious threat.

Here’s why it’s dangerous for any device it touches: Anatova forces PC users to infect their machines by replicating an application or game icon.

Once your device is infected, two things happen: your local files are encrypted and all files on network shares share the same destination.

In the worst case scenario, if the attacker wins, the victims will have to pay a ransom of 10 Dash coins (worth about $700) to decrypt their files.

How to get rid of Anatova ransomware?

 1.Enable Safe mode with Networking

How To Remove Anatova Ransomware From Windows 10 PC

It is possible to stop Anatova ransomware using Windows Safe Mode.

Follow the steps below to access Safe Mode and remove this malware:

  1. Open the start menu
  2. Click the on/off button
  3. Hold down the Shift key on your keyboard and select Restart
  4. Go solve problems
  5. Select advanced options
  6. Click the Startup Settings button
  7. Press Restart

How To Remove Anatova Ransomware From Windows 10 PC

8. Enable Safe Mode with Command Prompt Mode in Startup Settings

   2.Restore system files and settings

  1. Start a CMD instance with administrator privileges
  2. Type cd restore and press Enter button
  3. In the same CMD window, type rstrui.exe and press Enter button
  4. Locate the newly opened System Restore window
  5. Click the Next button
  6. Select the restore point created before the Aanatova attack
  7. Click the Next button
  8. Press the Yes button to start the recovery process.

How can I prevent Anatova ransomware?

Now that you’ve got rid of Anatova ransomware, you need to make sure it doesn’t come back.

As usual, prevention is better than cure. Therefore, it is advisable to take some safety precautions when using your PC, especially when you are online.

  • Always use confirmed official sources every time you download games, applications or any other document.
  • Avoid suspicious websites, especially those that are full of ads and pop-ups, or those that ask for notification permissions.
  • Don’t open emails that seem particularly suspicious
  • Avoid clicking attachments in email messages, especially if your email client has marked them as spam and blocked their contents.
  • Use reliable antivirus, antimalware and firewall solutions on your PC
  • Don’t ignore security warnings you may see while browsing a suspicious website

Ransomware is often dangerous because it can lock important documents on your computer.

With that in mind, it’s easy to see why backing up everything important on your computer can be a good way to fight Anatova ransomware.

Even in the worst case scenario, when your files are locked beyond recovery, you don’t have to pay the attacker a cent knowing you have backups.

It goes without saying that backups should never be on the same machine or location as the original files.

Otherwise, you also risk losing them to ransomware.

Just use a memory card or external hard drive and disconnect it once the backup is complete.


At the end of the day, if you have been affected by Anatova ransomware, you can easily remove it, provided you have enabled the system restore option on your PC.

If you manage to get rid of Anatova ransomware, don’t forget to backup your files and take all necessary measures to prevent it (or other similar malware) from coming back to your PC.

Similar Posts