remove shortcut virus

Shortcut virus is a virus which Enters into your USB flash drive, Hard Disk drive, Memory cards or mobile phone and changes your files into shortcuts with the original folder icons. The logic behind your folder becoming shortcuts is that this virus hides your original folders/files in the same removable media and creates the shortcut with the same name. If you are also getting the only Shortcut folder when inserting the USB drive, memory card on the computer. And looking for solution to get rid of this virus, Here we have some tips to remove shortcut virus without format the drive or without any data loss.

Remove Shortcut Virus 

Computer Virus infection is only removed through antivirus programs as you know. But this time we are talking about Shortcut Virus. Which is a new modern virus automatically comes in your computer/USB/SD card and convert your content into a shortcut. Some time this virus also invisible your all contents.

When you Plugin your Pen drive in Your friend’s Shortcut Virus affected PC. Or when you insert your Friends virus infected USB to your Computer, You may get this virus too. Let’s See How To remove This Virus.

Remove Shortcut virus using CMD

Using Command Prompt to remove a virus and recover files is the best way and there are 95% Possibilities of virus removal. This Method Removes Shortcut virus from Pen drive, Memory cards, PC, Hard disk, and even Mobiles.click on start menu type cmd select command prompt right click and run as administrator. This will open windows command prompt. Now insert virus affected USB drive ( External Drive ). And note down virus affected drive name (your system drive, USB drive or memory card drive letter name)

Type command as shown below
 attrib -h -r -s /s /d F:*.*

command to Remove Shortcut virus permanently

Note: Here F: is your system drive letter which is affected with shortcut virus.

About This Command  

Attrib is an MS-DOS command Which helps us to alter the properties of file/folder.
-h stands for “remove hidden”
-r stands for “remove read-only”
-s “unmark system”.

Now press enter and wait for few seconds to complete the command. After complete, the command check your drive, your Shortcut files again convert to normal files. Delete unknown files from your storage after command process completes. After when you got your files, just copy your files somewhere and format your USB Drive.

Method 2 To Remove Shortcut Virus

Actually, the shortcut virus is running in the task manager process > You may kill that process and your computer doesn’t create again shortcut in real time.

Right-click on Taskbar and select Task manager. Now on Task manager > Select process (More detail) > Scroll down below and search “wscript.vbs” process > Select them and end task

If the Drive gets infected again and again even after following the above-given methods, Just Install  Antivirus and do a Boot Time Scan, using this will remove all the malware in boot Time.

Remove Shortcut Virus using Registry Tweak

You can also Remove the shortcut virus using Registry tweak. To do this first open Run by pressing Win+R keys Here type regedit and hit Enter. This will open the Registry Editor window.
Now In the top left pane of registry editor, navigate to the following key.

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run

Here on right pane Look for the registry key odwcamszas , just right click on it and delete it. That’s all, Close registry and Restart windows to take changes effective.

How to Avoid your drive from Shortcut Virus

1. Disable Autorun, So that Pendrive won’t runs automatically

2. Scan for virus and then use the Pendrive.

3. Don’t use Pendrive in Public PC’s

4. Don’t use Harmful websites

5. Keep your Antivirus up to date

Note: If you know your PD is infected with a virus, don’t double-click on it.Try to browse it using right click or try to open it in a new window. Double-clicking runs the “Autorun.inf” which is mostly accompanied by a virus. Inside Autorun.inf there are commands written which finally executes your virus. Hence double-clicking an infected PD runs your virus and infects the PC.

Robeg
I am Robeg founder of this blog. My qualification. completed Bachelor of Arts (BA) and Microsoft Certified Professional (MCP). With a strong background in computer applications love write articles on Microsoft Windows (11, 10, etc.) Cybersecurity, WordPress and more.