How to Remove Shortcut Virus on Windows

If you've plugged in a USB drive or SD card and found that your files are missing and replaced with shortcuts, your USB drive has likely been infected with a shortcut virus. Luckily, your data still exists—it's just hidden by the virus. Y...
Method 1 of 2:

Using the UsbFix Antimalware Tool

  1. How to Remove Shortcut Virus on Windows Picture 1How to Remove Shortcut Virus on Windows Picture 1
    Remove the drive from the computer and reboot. You won't want to connect the drive until you install a quick tool that prevents it from running the virus automatically.
  2. How to Remove Shortcut Virus on Windows Picture 2How to Remove Shortcut Virus on Windows Picture 2
    Download and run Autorun Exterminator. You'll need this tool to prevent the virus from running automatically when you plug in your flash drive. Here's how to get it:
    1. Go to https://ccm.net/download/download-11613-autorun-exterminator and click the green Download button. If prompted, choose a folder to save the file to, then click Save.
    2. Open the Downloads folder (or the folder you selected).
    3. Right-click the file called AutoRunExterminator-1.8.zip and select Extract All'.
    4. Click Extract. This creates a new folder with the app inside.
    5. Double-click the new folder (called AutoRunExterminator-1.8) to open it.
    6. Double-click AutoRunExterminator.Exe. If prompted, click Yes or OK to allow the program to run.
  3. How to Remove Shortcut Virus on Windows Picture 3How to Remove Shortcut Virus on Windows Picture 3
    Connect the USB drive to your PC.
  4. How to Remove Shortcut Virus on Windows Picture 4How to Remove Shortcut Virus on Windows Picture 4
    Download and run UsbFix. This is a free app that will destroy the virus and restore your files. Here's how to get it:
    1. Go to https://www.fosshub.com/UsbFix.html and click 'Windows Installer. It's under the "Download" header.
    2. Select your Downloads folder and click Save.
    3. Open the Downloads folder and double-click the file that starts with "UsbFix." You may have to click Yes to allow the app to run.
  5. How to Remove Shortcut Virus on Windows Picture 5How to Remove Shortcut Virus on Windows Picture 5
    Click Run an Analysis. It's near the bottom of the window.
  6. How to Remove Shortcut Virus on Windows Picture 6How to Remove Shortcut Virus on Windows Picture 6
    Click Full Analysis. The tool will now scan your computer, including the flash drive, for viruses. This may take a while.
  7. How to Remove Shortcut Virus on Windows Picture 7How to Remove Shortcut Virus on Windows Picture 7
    Follow the on-screen instructions to remove the virus. If a virus is found, the tool will remove it from your flash drive.[1]
    1. If the tool does not detect the virus or cannot remove it, use the "Using the Command Line" method.
  8. How to Remove Shortcut Virus on Windows Picture 8How to Remove Shortcut Virus on Windows Picture 8
    Remove the USB drive and reboot the computer.
  9. How to Remove Shortcut Virus on Windows Picture 9How to Remove Shortcut Virus on Windows Picture 9
    Run a full virus scan on the computer. Once you're finished fixing the drive, see How to Remove a Virus to learn how to run a full virus scan on your computer and remove any other malware. It's important to make sure your computer is virus-free before you reconnect the flash drive.
    1. Your files should be visible on your drive now. If you don't see them, they've been buried in a folder. The folder may not have a name (or its name may be unfamiliar). Double-click each folder you see until you've found the one with your files inside.
    2. You can delete the AutorunExterminator whenever you wish by right-clicking its folder in the File Explorer and selecting Delete.
Method 2 of 2:

Using the Command Line

  1. How to Remove Shortcut Virus on Windows Picture 10How to Remove Shortcut Virus on Windows Picture 10
    Remove the drive from the computer and reboot. Since most shortcut viruses come with programs that will run automatically, you'll need to start your computer without it attached.
  2. How to Remove Shortcut Virus on Windows Picture 11How to Remove Shortcut Virus on Windows Picture 11
    Download and run Autorun Exterminator. This tool prevents the virus from starting automatically when you plug in the flash drive. Here's how to get it:
    1. Go to https://ccm.net/download/download-11613-autorun-exterminator and click the green Download button. If prompted, choose a folder to save the file to, then click Save.
    2. Open the Downloads folder (or the folder you selected).
    3. Right-click the file called AutoRunExterminator-1.8.zip and select Extract All'.
    4. Click Extract. This creates a new folder with the app inside.
    5. Double-click the new folder (called AutoRunExterminator-1.8) to open it.
    6. Double-click AutoRunExterminator.Exe. If prompted, click Yes or OK to allow the program to run.
  3. How to Remove Shortcut Virus on Windows Picture 12How to Remove Shortcut Virus on Windows Picture 12
    Connect the USB drive to your PC.
  4. How to Remove Shortcut Virus on Windows Picture 13How to Remove Shortcut Virus on Windows Picture 13
    Determine the drive letter of the USB drive. You can skip this step if you already know the drive letter (e.g., E:). Here's how to find the drive letter:
    1. Press Win+E to open the File Explorer.
    2. Scroll down the left column to the "This PC" or "Computer" section.
    3. Find the drive letter next to the name of the flash drive.
  5. How to Remove Shortcut Virus on Windows Picture 14How to Remove Shortcut Virus on Windows Picture 14
    Open the Command Prompt as an administrator. The process varies depending on the version of Windows you are using:
    1. Windows 10 and 8: Press Win+X to open the Power Users menu (or right-click the Start menu), then click Command Prompt (Admin) or Windows PowerShell (Admin). Click Yes if prompted to give permission.
    2. Windows 7 and older: Press Win+R to open the Run bar, then type cmd into the box. Press Ctrl+ Shift+ Enter to run it as an administrator, then enter your password (or confirm) to run the app.
  6. How to Remove Shortcut Virus on Windows Picture 15How to Remove Shortcut Virus on Windows Picture 15
    Type DRIVELETTER: and press Enter. Replace DRIVELETTER with the letter of your flash drive.
  7. How to Remove Shortcut Virus on Windows Picture 16How to Remove Shortcut Virus on Windows Picture 16
    Type del *lnk and press Enter. This deletes the shortcuts from the drive.[2]
  8. How to Remove Shortcut Virus on Windows Picture 17How to Remove Shortcut Virus on Windows Picture 17
    Type attrib -h -r -s /s /d DRIVELETTER:*.* and press Enter. Replace DRIVELETTER with your USB drive's letter. This unhides the files, remove any read-only attributes, and remove the shortcuts. When the command is finished running, your files will be usable again.
    1. For example, if your USB drive's letter is E, type attrib -h -r -s /s /d E:*.* and press Enter.[3]
  9. How to Remove Shortcut Virus on Windows Picture 18How to Remove Shortcut Virus on Windows Picture 18
    Remove the flash drive from the computer. The next step is to scan your computer for malware and repair any found issues so that your drive is not re-infected.
  10. How to Remove Shortcut Virus on Windows Picture 19How to Remove Shortcut Virus on Windows Picture 19
    Do a full virus scan in Windows. If you don't have your own anti-virus software installed, see How to Remove a Virus to learn how to run a full scan using the built-in tools for Windows. If any malware is found, follow the on-screen instructions to get rid of it.
  11. How to Remove Shortcut Virus on Windows Picture 20How to Remove Shortcut Virus on Windows Picture 20
    Reboot your computer and reconnect your USB drive. Now that you're all in the clear, it's a good idea to format the flash drive just in case any issues remain. The remaining steps will walk you through this process.
    1. When you reboot the computer, AutoRunExterminator will not run automatically. You can delete the app whenever you wish by right-clicking its folder in the File Explorer and selecting Delete.
  12. How to Remove Shortcut Virus on Windows Picture 21How to Remove Shortcut Virus on Windows Picture 21
    Return to the File Explorer and double-click your USB drive. If you closed the window, press Win+E to open it again. Your USB drive will be under "This PC" or "Computer" in the left column. You should see your files.
    1. If you don't see your files, they've been buried in a folder. The folder may not have a name (or its name may be unfamiliar). Double-click each folder you see until you've found the one with your files inside.
  13. How to Remove Shortcut Virus on Windows Picture 22How to Remove Shortcut Virus on Windows Picture 22
    Copy the recovered files to a safe location on your computer. You'll want to back up your existing files onto your computer so you don't lose them when formatting.
    1. One way to do this is to create a folder on your desktop (right-click the desktop, select New Folder, give it a name, and then press Enter) and drag the files to it. Don't proceed until these files are moved because you'll be formatting the flash drive.
  14. How to Remove Shortcut Virus on Windows Picture 23How to Remove Shortcut Virus on Windows Picture 23
    Right-click the flash drive's letter in the File Explorer. It's under "This PC" or "Computer." A menu will appear.
  15. How to Remove Shortcut Virus on Windows Picture 24How to Remove Shortcut Virus on Windows Picture 24
    Click Format. This opens the formatting window.
  16. How to Remove Shortcut Virus on Windows Picture 25How to Remove Shortcut Virus on Windows Picture 25
    Remove the "Quick Format" check mark and click Start. This completely erases and formats the flash drive, removing what's left of the virus. This process can take a while depending on your computer.[4]
  17. How to Remove Shortcut Virus on Windows Picture 26How to Remove Shortcut Virus on Windows Picture 26
    Place the files back onto the flash drive after formatting. Your flash drive is now back to normal.
4 ★ | 1 Vote