How to Remove Shortcut Virus from a Windows PC or Laptop

PDF download Download Article
PDF download Download Article

If you've plugged in a USB drive or SD card and found that your files are missing and replaced with shortcuts, your USB drive has likely been infected with a shortcut virus. Luckily, your data still exists—it's just hidden by the virus. You can remove the virus using a free tool like UsbFix or by running some commands at the command prompt. Once the virus is removed from the flash drive, do a full scan of your computer using you preferred antivirus tool before reconnecting the USB drive.

Getting Rid of a Shortcut Virus

Removing a shortcut virus is hard work, but it's not impossible. If you feel comfortable with the Command Prompt, you can use the command line interface to try and remove the virus. Otherwise, try an antimalware utility like UsbFix. Both of these methods will remove the shortcut virus without losing your data.

For popular FAQs on removing a shortcut virus on Windows, jump to more common questions .

Method 1
Method 1 of 2:

Using the UsbFix Antimalware Tool

PDF download Download Article
  1. You won't want to connect the drive until you install a quick tool that prevents it from running the virus automatically.
  2. You'll need this tool to prevent the virus from running automatically when you plug in your flash drive. Here's how to get it:
    • Go to https://ccm.net/download/download-11613-autorun-exterminator and click the green Download button. If prompted, choose a folder to save the file to, then click Save .
    • Open the Downloads folder (or the folder you selected).
    • Right-click the file called AutoRunExterminator-1.8.zip and select Extract All' .
    • Click Extract . This creates a new folder with the app inside.
    • Double-click the new folder (called AutoRunExterminator-1.8 ) to open it.
    • Double-click AutoRunExterminator.Exe . If prompted, click Yes or OK to allow the program to run.
    Advertisement
  4. This is a free app that will destroy the virus and restore your files. Here's how to get it:
    • Go to https://www.fosshub.com/UsbFix.html and click ' Windows Installer . It's under the "Download" header.
    • Select your Downloads folder and click Save .
    • Open the Downloads folder and double-click the file that starts with "UsbFix." You may have to click Yes to allow the app to run.
  5. It's near the bottom of the window.
  6. The tool will now scan your computer, including the flash drive, for viruses. This may take a while.
  7. If a virus is found, the tool will remove it from your flash drive. [1]
    • If the tool does not detect the virus or cannot remove it, use the "Using the Command Line" method.
  9. Once you're finished fixing the drive, see How to Remove a Virus to learn how to run a full virus scan on your computer and remove any other malware. It's important to make sure your computer is virus-free before you reconnect the flash drive.
    • Your files should be visible on your drive now. If you don't see them, they've been buried in a folder. The folder may not have a name (or its name may be unfamiliar). Double-click each folder you see until you've found the one with your files inside.
    • You can delete the AutorunExterminator whenever you wish by right-clicking its folder in the File Explorer and selecting Delete .
    10. Advertisement
Method 2
Method 2 of 2:

Using the Command Line

PDF download Download Article
  1. Since most shortcut viruses come with programs that will run automatically, you'll need to start your computer without it attached.
  2. This tool prevents the virus from starting automatically when you plug in the flash drive. Here's how to get it:
    • Go to https://ccm.net/download/download-11613-autorun-exterminator and click the green Download button. If prompted, choose a folder to save the file to, then click Save .
    • Open the Downloads folder (or the folder you selected).
    • Right-click the file called AutoRunExterminator-1.8.zip and select Extract All' .
    • Click Extract . This creates a new folder with the app inside.
    • Double-click the new folder (called AutoRunExterminator-1.8 ) to open it.
    • Double-click AutoRunExterminator.Exe . If prompted, click Yes or OK to allow the program to run.
  4. You can skip this step if you already know the drive letter (e.g., E: ). Here's how to find the drive letter:
    • Press ⊞ Win + E to open the File Explorer.
    • Scroll down the left column to the "This PC" or "Computer" section.
    • Find the drive letter next to the name of the flash drive.
  5. The process varies depending on the version of Windows you are using:
    • Windows 10 and 8: Press ⊞ Win + X to open the Power Users menu (or right-click the Start menu), then click Command Prompt (Admin) or Windows PowerShell (Admin) . Click Yes if prompted to give permission.
    • Windows 7 and older: Press ⊞ Win + R to open the Run bar, then type cmd into the box. Press Ctrl + ⇧ Shift + ↵ Enter to run it as an administrator, then enter your password (or confirm) to run the app.
  6. and press ↵ Enter . Replace DRIVELETTER with the letter of your flash drive.
  7. This deletes the shortcuts from the drive. [2]
  8. \*.* and press ↵ Enter . Replace DRIVELETTER with your USB drive's letter. This unhides the files, remove any read-only attributes, and remove the shortcuts. When the command is finished running, your files will be usable again.
    • For example, if your USB drive's letter is E , type attrib -h -r -s /s /d E:\*.* and press ↵ Enter . [3]
  9. The next step is to scan your computer for malware and repair any found issues so that your drive is not re-infected.
  10. If you don't have your own anti-virus software installed, see How to Remove a Virus to learn how to run a full scan using the built-in tools for Windows. If any malware is found, follow the on-screen instructions to get rid of it.
  11. Now that you're all in the clear, it's a good idea to format the flash drive just in case any issues remain. The remaining steps will walk you through this process.
    • When you reboot the computer, AutoRunExterminator will not run automatically. You can delete the app whenever you wish by right-clicking its folder in the File Explorer and selecting Delete .
  12. If you closed the window, press ⊞ Win + E to open it again. Your USB drive will be under "This PC" or "Computer" in the left column. You should see your files.
    • If you don't see your files, they've been buried in a folder. The folder may not have a name (or its name may be unfamiliar). Double-click each folder you see until you've found the one with your files inside.
  13. You'll want to back up your existing files onto your computer so you don't lose them when formatting.
    • One way to do this is to create a folder on your desktop (right-click the desktop, select New Folder , give it a name, and then press ↵ Enter ) and drag the files to it. Don't proceed until these files are moved because you'll be formatting the flash drive.
  14. It's under "This PC" or "Computer." A menu will appear.
  15. This opens the formatting window.
  16. This completely erases and formats the flash drive, removing what's left of the virus. This process can take a while depending on your computer.
  17. Your flash drive is now back to normal.
    18. Advertisement

Common Questions: Dealing With Shortcut Viruses

How do you get a shortcut virus?

The most common way to get a shortcut virus is to run an executable fie (.exe) that was infected with the virus. Using a USB stick that was infected with the virus is another common way shortcut viruses are spread between computers.

Is a shortcut virus harmful?

Any virus should be treated as harmful, even if you haven't seen any harmful effects from one yet. Viruses are malicious programs that can cause a lot of harm, and shortcut viruses are especially harmful because you can spread them without even realizing it.

Can I remove a shortcut virus without losing my data?

Yes, you can get your data back from a shortcut virus. Use a tool like UsbFix to remove the virus, or advanced users can use the Command Prompt to get rid of it. You also may want to try using an antimalware software like Malwarebytes to locate and quarantine the virus.

Video

Tips

Submit a Tip
All tip submissions are carefully reviewed before being published
Name
Please provide your name and last initial
Submit
Thanks for submitting a tip for review!

You Might Also Like

How to
Take a Screenshot on a Windows PC: 8 Simple Tricks
How to
Check Your Windows Version
How to
Find Your Windows Product Key
Easily Download and Install FFmpeg on a Windows PC
How to
Check Your Mouse DPI on Windows & Mac
How to
Start Windows in Safe Mode: 6 Easy Options
5 Quick Ways to Change Your Desktop Wallpaper on Windows
4 Easy Ways to Access the Boot Options Menu in Windows
How to
Access the BIOS on Any PC: Guide + Troubleshooting
How to
Disable BitLocker Encryption in Windows 10 and 11
3 Easy Ways to Move a Full Screen Game to Another Monitor
How to
Automatically Shut Down Your Computer at a Specified Time
2 Ways to Alter the Size of Your Windows Desktop Taskbar
Installing Windows 10 or 11 on Ubuntu: A Step-by-Step Guide
Advertisement

References

  1. ↑ https://www.fosshub.com/UsbFix.html
  2. ↑ https://www.itechfever.com/remove-shortcut-virus/
  3. ↑ http://www.techchore.com/flashdrive-shortcut-virus-and-two-2-methods-to-get-rid-of-it/

About This Article

In other languages
Thanks to all authors for creating a page that has been read 774,363 times.

Reader Success Stories

  • shariq shajahan

    Sep 9, 2017

    "It amazed me, I am actually able to get my files back from those nasty shortcut viruses. It's easy, just ..." more
More reader stories Hide reader stories
Share your story

Is this article up to date?

Advertisement