FacebookTwitterLinkedIn

How to do a system restore using command prompt?

How to perform a System Restore using Command Prompt? (ransomware or virus is blocking Safe Mode)

The System Restore function restores operating system files to an earlier point in time. System Restore is useful when malicious software infiltrates a computer and damages the system files. Moreover, this function important when dealing with variants of ransomware infections that block computer screens. This tutorial describes the process of performing a System Restore using Command Prompt. In some cases, especially when dealing with ransomware infections, performing a System Restore is a complicated task, since modern fake antivirus programs and ransomware infections are capable of blocking an operating system's Safe Mode and Safe Mode with networking. This leaves one solution: performing a System Restore using Command Prompt.

To perform a System Restore using Command Prompt:

1. Start your computer in Safe Mode with Command Prompt. During the computer start process, press F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, then select Safe mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window, click 'Next'.

restore system files and settings

5. Select one of the available restore points and click 'Next' (this will restore your computer system to an earlier time and date).

select a restore point

6. In the opened window, click 'Yes'.

run system restore

7. If you are dealing with a ransomware infection, download and scan your PC with recommended malware removal software after restoring your computer to a previous date.

Note that in some cases, System Restore does not eliminate security infections - malicious programs can hide within restore points. After performing a System Restore, scan your computer with legitimate anti-spyware software.

▼ Show Discussion

About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.