Got it!

This website uses cookies to ensure you get the best experience on our website More info

Contact us

Cookie & Privacy Policy

About this Blog

Terms of Service

WRITE FOR US

HOME

TUTORIALS

REVIEWS

ANTIVIRUS

ANTI-MALWARE

Home
Tutorials
How To
How to Remove Shortcut Virus Permanently | SOLVED!

How to Remove Shortcut Virus

Permanently | SOLVED!
July 11, 2016 How to, Shortcut Virus, Tutorials, Virus Removal 325 Comments

Sponsored links

REMOVE SHORTCUT
COMPUTER

VIRUS

FROM

FLASH

DRIVE

AND

How to remove shortcut virus? Definitely, that question is the very reason why you are here.
Another question that you might ask is, I have an antivirus but how come I still got infected
with this shortcut virus? The short answer is, not all antivirus can detect shortcut virus.
However, the good news its not that hard to remove. In less than a minute you can easily
remove, terminate and prevent shortcut virus from your computer by yourself. All you need is
to follow the step by step guide below.

Recommended reading: 7 Signs of Virus infected flashrive

What is Shortcut Virus?

File and Folder Shortcut virus.

Flash Drive Shortcut virus.

Shortcut virus first aide (things you need to do before removing shortcut virus).

How to remove shortcut virus easily in 4 clicks using shortcut virus remover?

How to fix shortcut virus using CMD/Command Prompt?

How to remove shortcut virus via registry?

How to remove shortcut virus effectively and permanently?

How to block and prevent shortcut virus?

WHAT IS SHORTCUT VIRUS

Shortcut virus has two types; the most common is Flash drive Shortcut virus, then the File and
Folder Shortcut virus. These two includes the following shortcut virus variants:
Sponsored links

Emsisoft Trojan.VBS.TTE (B), Trojan.Generic.7206697 (B).

ESET VBS/Autorun.EY worm, Win32/Ramnit.A virus.

Microsoft Security Essential Worm:VBS/Cantix.A.

McAfee VBS/Autorun.worm.k virus.

AVG VBS/Worm.BH.

Bitdefender Trojan.VBS.TTE.

ClamWin VBS.Agent-35.

Quickheal VBS/Canteix.AK.

Sophos Troj/Agent-NXIMal/FakeAV-BW, Mal/Bundpil-LNK.

ClamAV W32.Trojan.Starter-2, W32.Exploit.CVE-2010_2568-1.

Avira W32/Sality.AB.2

SmadAV VBS.Serviks, Serviks.Shortcut, Ramnit.CPL and Bundpil.Shortcut.

Most shortcut virus ends with .EXE, .VBS. LNK and .INI file extensions.

FILE AND FOLDER SHORTCUT VIRUS

This will replicate your files and folders, hide and replace it with shortcuts.exe. This is a
combination of Trojan and Worm. The bad thing about this, it will leave you no options but to
click it in order to open your files and folders. Then after executing it, the virus starts to
duplicate itself and install malicious software that monitors your computing habit and worst,
steal your important data and credit card information.

FLASH DRIVE SHORTCUT VIRUS

This is purely Trojan; it consolidates every file in your portable devices and put it into one
hidden folder. Then, it creates a Flash Disk shortcut.exe. Like the file and a folder shortcut
virus, it will give you no choices but to click it to see your files. Once executed, it installs
malicious applications that spy your computing routine and most probably steal your financial
records if not detected.

SHORTCUT VIRUS FIRST AIDE

Unfortunately, as what I have said earlier, not all antivirus can detect this type of virus. So,
the best thing you can do, is to make-it-a-habit not to open your portable devices or hard
drive via autorun or from my computer. Heres the complete Shortcut virus First Aide to

do lists;
Do not open your Flash Drive via autorun and from My Computer.

Open your Flash Drive and Hard Disk by right-clicking it, then click explore or type its

drive letter in the windows address bar to prevent any script from running.
Follow the instruction here how to unhide Files hidden by the virus, to see the real files
which are hidden by shortcut virus and to avoid executing it.
The above steps are designed to prevent shortcut virus from infecting your computer. It will
also help you distinguish the real file from the virus-made files. As what I have said earlier,
even prominent antivirus failed to catch shortcut virus. Nonetheless, I will be sharing you 3
methods to remove it, follow the guide below;
Sponsored links

HOW TO REMOVE SHORTCUT VIRUS USING SHORTCUT VIRUS

REMOVER TOOLS METHOD 1?
Download these two tools, namely: Trojorm Removal Tool and Shortcut virus
fixfolder

Now, after downloading the shortcut virus remover tools above, extract it using winrar or any
other file decompressor. Then run the Trojorm Removal tool first, make sure that you run it
inside your flash drive, wait until the scan is complete and press enter. Next, copy the
Shortcut Virus fix folder, paste it inside your flash drive or external drive. Then, open it via
right-click, choose open with and select notepad. Look for the H:, change it according to
your Flash Drives letter (ex. E:, F:, G: and so on).

So, if you are done editing, save it. Now double click the vbs file or open it via right-click,
choose Windows Based Script Host. . .after running the script, shortcut virus must be gone
and your files are now visible.

HOW TO REMOVE SHORTCUT

PROMPT/CMD? METHOD 2

VIRUS USING

COMMAND

You should proceed this method if the first one doesnt work. This involves a command
prompt. Now click start, run, type CMD type the drive letter of your flash drive or
external hard disk and a colon after it eg F: Once done type this attribute attrib f:*.* /d /s
-h -r -s. You should see your files now and Shortcut Virus must be removed.

Please take note the f: after the attrib, change it with your flash disk drive letter; if your flash
drive, drive letter is e: then change it with e:.

HOW TO REMOVE SHORTCUT VIRUS FROM REGISTRY?

Please take note that this guide is for advance users only. I will not be liable of whatever
consequences that may take place after following this guide on how to remove shortcut virus
via Registry. I am not trying to frighten you but one mistake may affect your PCs normal

operation.
Press the windows key + R, type regedit to enter the registry.
Navigate

through HKEY_CURRENT_USER

/ Software /

Microsoft

Windows

CurrentVersion / Run. Normally, you shouldnt see any key except the default as you can see
in the image below. Any key that is unusual such as WXCKYz, OUzzckky and other that ends
with VBS, INI, LNK and EXE extension are safe to delete. However, this is a case to case basis,
do this in your own discretion. Besides you are the only one who knows what software you
install in your computer.

Press the windows key + R again, type msconfig click OK, in Startup tab

uncheck everything except your antivirus. Click OK and Restart now.

SHORTCUT VIRUS REMOVER TOOLS AND COMMAND PROMPT

ACCESS DENIED PROBLEM
Shortcut virus remover and CMD attrib command are two best methods of removing shortcut
virus ill-effects. However, in some occasion using these methods returns an access denied
error. This problem is common on hard disk that uses NTFS this is rare on Flash drives (FAT &
FAT32).
Solutions:
1.

In fixfolder, see to it that you change the drive according to your Flash drive and hard
disk drive letter.

2.

In the command prompt, make sure that you typed the command correctly including
the spaces.
What if you did everything right, from changing drive letter and typing the attrib command
accurately as it is and still receive the access denied error?

Run chkdsk command using CMD. If you dont know how to do it? Please visit this
guide Windows detected a hard disk problem.

HOW TO CLEAN, DELETE AND REMOVE STUBBORN

SHORTCUT VIRUS FROM EXTREMELY INFECTED PC,
COMPUTER, LAPTOP, NOTEBOOK AND OTHER PORTABLE
DEVICES PERMANENTLY?

You followed the shortcut virus remover guide above and found it helpful. In fact, your
shortcut virus problem is now solved. However, after plugging again your Flash drive, external
hard drive (HDD) and SD card it became infected again. Why this happen?
Reason: Your computer is extremely infected with shortcut virus.
Solutions: You should clean your PC first and protect it before inserting any of your storage

devices. How?
Download RKill and run it. To stop any malicious processes including shortcut virus.

Download RogueKiller and run it as well. To remove any variants of trojans.

Download Malwarebytes , install, update and run a scan. For more malware removal

that RogueKiller might missed.

Install SmadAV Antivirus. A finishing touch, this also removes shortcut virus and act as
computer shield against it. Thus, preventing future infections.
Note: Please do not restart your PC until you finished installing SmadAV antivirus.

HOW TO REMOVE SHORTCUT VIRUS VIDEO TUTORIAL

This Shortcut virus removal video tutorial, is an answer to all emails, requesting me to make a
video tutorial of this post. It will be the best solution for those who are fond or more
comfortable on video tutorial. In this tutorial also, you will learn the two types of shortcut
virus.

It

is

all

in

one

Shortcut

Virus

removal

How-to.

SHORTCUT VIRUS REMOVER

Finally, if you followed the two methods above and still you see the shortcuts, use this
shortcut virus remover to remove those shortcuts remnants.

Download: HFV HFV Hidden Folder Virus is my favorite shortcut virus remover. It is easy to use
and you dont need to install it in your system because it works as a standalone application. If
run in the first time, it will prompt you to enter your desired password. HFV can disinfect and
remove shortcut virus both from internal and portable devices. To clean your Hard Drive,
Folder, Files or Portable device just simply click the ADD or BROWSE, select the desired
drive, folder or file, then choose the Delete Virus after that click Unhide Files to recover
your files. Thats how easy HFV removes shortcut virus.

IF YOU ARE NOT COMFORTABLE OF USING HFV, OTHER

SHORTCUT VIRUS REMOVER AND ALTERNATIVES ARE GIVEN
BELOW.
USBFix is a USB utility software designed primarily on Flash drive or portable devices
disinfection but also able to clean your computer partitions. An installation is required to
vaccinate your PC or SD card, flash drive and external drives. The good thing about USB Fix is
its updated, they released the 2016 version already. To remove shortcut virus simply click the

vaccinate and the rest is automatic.

Download USBFix here.
Shortcut Virus Remover v3.1 this is one of the most popular shortcut virus remover on the
web. Like HFV, you dont have to install this. By double clicking shortcut virus remover 3.1, a
pop up box will appear, giving you two options. If you want to remove shortcut virus from your
pen drive, simply choose Pen Drive, select the drive letter and click scan. However, if you

want your PC to be cleaned then select Computer then Scan.

Download Shortcut virus remover 3.1 here.

Shortcut Virus Remover BAT this is a BAT file, very light with just 3.6Kb yet effective in

removing shortcut virus with just one click.

Download shortcut virus remover here.

HOW TO PREVENT SHORTCUT VIRUS FROM COMING BACK?

Install HFV or SmadAV as your primary defense and a good antivirus. Then do a weekly scan
with Malwarebytes to complete your solid protection. Your comments and suggestions are
highly appreciated to improve this How to Remove Shortcut Virus Tutorial. Speak up your

mind in the comment box below.

Software
Download
Solved
Video
Download Now
Sponsored Links

Related Posts

4 Steps to level-up your Cyber cafe

PCOS machines can be manipulated?

How to Boost Sun Broadband

About The Author
I.C Tiempo
Hi! :-) Welcome to my tutorial & review site. This blog is an expression of my passion to
technology, especially to software, computer & networking troubleshooting and other techrelated concern. You can find me @:(Google Plus |Facebook |Twitter, )

325 Comments
1.

Roxanne
Thank you very much! I was able to remove shortcut virus by myself easily. Thanks again, I
recovered all my files!
Reply

2.

megha
hi..my system is rare NTFS type as you said above, it is showing access denied in both
methods..moreover it is showing access denied even in chkdsk command..what should I do.?
please suggest
Reply

I.C Tiempo

Hello Megha, please try SmadAV. I guess its a system partition, can you please try to
run CMD as administrator? Go to Start -> Accessories -> right click command
prompt -> run as administrator.
Reply

3.

gopalakrishnan
Thank you its working good. I use the CMD method above.
Reply

4.

israfil
Thank you
Clean the simplistic shortcut virus programs by using the usbshow
Reply

5.

Salma
Thank you so much for all the options provided. It has really helped me out!!
Reply

6.

Anonymous
using HFV delete virus & unhide file, but still the shortcut still come back..
Help please.
Reply

I.C Tiempo

Please scan your computer with antivirus, preferably ESET NOD32, even just the trial
version then use HFV again.
Reply

7.

Angelica
Hi. I cant download any of the above based on the links provided. Are there updated links?
Thank you!

Reply

I.C Tiempo

Hi, I tried the links and all are working fine. Yes, the links here are always updated.
Reply

8.

Angelica
Hi! In Windows 10, I cant find the explore option when I right-click the external hard drive. Is
it the same with open in new window? Also, does a smartphone prone to this kind of virus as
well? I remember having a shortcut key of my phone in my laptop before though I didnt
remember creating that. Should I perform the above procedures for my phone?
Reply

I.C Tiempo

Hello Angelica, indeed in Windows 10 there is no explore option. So you just need
to type the drive letter of your drive followed by a colon at the address bar (F:).
Regarding smartphone, it can be infected by shortcut virus if you connect it on
infected PCs and if the SD card you use on your phone is infected. However, it seems
that the effect of shortcut virus on android isnt significant. I dont recommend you to
perform the guides above on your smartphone, unless you know what you are doing.
For general public, I dont recommend this on smartphone, seek the help of your
friend that has knowledge about computing.
Reply

9.

Ben
So I followed all the steps. First CMD which didnt work. Then I downloaded RKill, HFV, and
SmadAv and followed all the steps. Cleaned a couple of viruses and then I did a full scan with
Avira and formatted my USB. However as soon as I insert it the shortcut is back. What could
be wrong?
Reply

I.C Tiempo

Hi Ben, your computer is extremely infected with shortcut virus not just your flash
drive. I would suggest to to use Rkill again, download and install Eset Nod32 and
Smadav. Do a full scan using Eset Nod32 and keep Smadav installed. Please take
note, you have to uninstall Avira. You will be using Eset Nod32 trial, after the full scan
you can remove it and re-install your Avira.
Reply

10.

Pingback: Joel
I.C Tiempo

Hi Joel, you are always welcome. Am glad that you found this post helpful and that it
solved your shortcut virus problem.
Reply

11.

Pingback: Unknown

12.

Melvin
I already have Trend Micro Maximum Security 2016, after the method u posted can it settle
down ?
Reply

I.C Tiempo

Hi Melvin, what do you mean by settle down? Are you trying to emphasize
compatibility?
Reply

13.

sacf
Yesterday my friend gave me pendrive to copy an iso window file.I tried to copy but it wont,so
i formatted it and choosing NTFS format,then the file got copied but it left a drive naming
Removable disk I and it wont get deleted and i tried to format it but it wont go away by
displayingwindows is unable to format.Its annoying me what should i do
Reply

I.C Tiempo

Hi Sacf, try to format it via disk management or try to use HP USB Disk Storage
format tool.
Reply

14.

sac
It shows Access Denied.What should I do?
Reply

I.C Tiempo

Hi Sac, simply run a chkdsk to that particular partition or drive. Actually, the
instruction on how to do it is included in this post, just take sometime to read.
Reply

15.

Christopher
When I ran cmd, it didnt do anything it was still there how?!
Reply

I.C Tiempo

Hello Christopher, if you followed the instruction carefully, you should be able to
solved your shortcut virus problem. Nonetheless, if CMD method did not work for you,
please use the other methods, try to use the shortcut virus remover.
Reply

16.

navin kumar
Sir,Im using Hp laptop,i5,when i copy file from pen-drive,it shows shortcut in F drive,also in
localdisk C. Please help me.
Reply

I.C Tiempo

Hi Navin, please follow the guide here How to unhide files hidden by virus. Now you
should see your real files, then download the fix folder & trojorm remover. Run it to
fully recover your files. Afterwards, run Rkilland SmadAV.
Reply

17.

Princeyen
Maam/Sir. Needs Help. I was being attacked by Cerber Virus, Is ther anyone there knows how
to retrieve files that was being damaged by Cerber Virus???..Thanks in advance..
Reply

I.C Tiempo

Hello Princeyen, cerber virus is one of he many ransomware variants. Since its a
different issue, I cannot address that problem here. However, I will try to make a post
about that cerber virus.
Reply

18.

Jerry
Thank you very very much. You saved my projects. If not because of this How to remove
shortcut virus guide, I was not able to retrieve my important files.

Reply

19.

Anika
Definitive solution to remove virus to create shortcuts. It also removes the computer virus by
preventing the virus back to the pen- drive. Thanks!
Reply

20.

Siddharth sharma
Sir it worked for 1 or 2 min then again it started making shortcuts.
Reply

I.C Tiempo

Hello Sidd, your computer is infected with shortcut virus. Please use Rkill first, install
Smadav, scan your PC with it, every partition. Install the trial version of ESET Nod32
Antivirus, turn on all the protection, scan your computer and restart. Then, use the
fixfolder or CMD attribute to unhide your files.
Reply

21.

rod bryan e glova

shortcut virus/malware finally been solved..
thanks for the details sir.
cant do this without your guide
it helps us a lot.. we mean a lot!!!
no words can express my gratitude..
best regards
Reply

I.C Tiempo

You are very much welcome Rod

. Am happy too, that you solved your

shortcut virus problem with this guide.

Reply

Chloe

Can I ask what particular method you tried?

-Chloe xx
Reply

22.

V.Vijayakumar
lot of thanks. you saved my internal and external devices.
Reply

23.

Anonymous
Youre a savior mate thanks it worked.
Reply

24.

Syed
It didnt help me at all, I tried all of the options, the HFV did work but after I safely ejected my
USB drive, the shortcuts was still there. please help me because am having shortcuts every
time opening up my USB drive and I hope this info helps but if I plug my USB drive in another
computer the shortcuts was not there.
Reply

I.C Tiempo

Hello Syed, kindly follow the subheading HOW TO CLEAN, DELETE AND REMOVE
STUBBORN SHORTCUT VIRUS FROM EXTREMELY INFECTED PC, COMPUTER, LAPTOP,

NOTEBOOK AND OTHER PORTABLE DEVICES PERMANENTLY?. I would also suggest to

download and install Nod32 Antivirus (even just the trial version), update it and scan
your computer.
Reply

SAE

So how to run the antivirus if shortcut virus hide first your data on flash drive?
And via email wont sending file with extension .exe right ..
Reply

I.C Tiempo

Hello SAE, take sometime to read the whole post carefully. Everything is
explained on the guide above, all you need is to read and follow it
systematically.
Reply

25.

Suraj Shukla
thank you saved my files
Reply

26.

Vikas Kumar
Thank You Very Much This Post Is Very Helpful :))))))))))))
Reply

I.C Tiempo

Hello Vikas, thanks for the compliment. Am glad that this guide on how to remove
shortcut virus helped you.
Reply

27.

Pingback: Tristan

28.

Howard
This is the best step by step guide on how to remove shortcut virus I ever tried. Thank you so
much bro! I was able to remove shortcut virus in just 3 clicks! More power.
Reply

I.C Tiempo

You are always welcome Howard! Am glad that this shortcut virus remover guide
helped you solved your shortcut virus problem.
Reply

29.

gc
thank you very much
u solved my problem
also thank you to the software companies
i love u all
Reply

I.C Tiempo

You are always welcome GC, am glad that this shortcut virus remover guide helped
you remove shortcut virus.
Reply

30.

grace
THANK YOU VERY MUCH SIR
i love u for your effort
Reply

I.C Tiempo

You are welcome Grace, Im happy to learn that you remove shortcut virus by
yourself using this guide.
Reply

31.

ali
thank you much , it is detailed information and very applicable .
Reply

I.C Tiempo

Hello Ali, am also very thankful that you found this shortcut virus remover guide
helpful.
Reply

32.

Ryan Anwar
Thank You sooooooooooooooooooooooooooooooooooooooooooo much!!!! it works!!!
The cmd or the first method did not work at all, but the hfv cleaner totally fixed it!!
Reply

I.C Tiempo

Hello Ryan, You are welcome

. A glad that this Shortcut virus remover guide

solved your shortcut virus issue.

Reply

33.

Alif
Dont know what to say. Ive been strugling to remove the virus. Thank you soooo much!
Reply

I.C Tiempo

Hello Alif, you are very much welcome. Am thankful also that this Shortcut virus
remover guide helped you delete shortcut virus.
Reply

34.

RAHUL
THANK YOU SOOOOOOOOOOOOOO MUCCCCCHHHHHHHH!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
MY USB DRIVES VIRUS WAS NOT REMOVING WITH THE CMD OR REGEDIT THANKS FOR
GIVING ME THIS
THANK YOU !!!!!!!!!!!!!!!!!!!!!!
Reply

I.C Tiempo

You are very much welcome Rahul! Am happy that this tutorial helped you overcome
the effects of shortcut virus.
Reply

35.

sandeep
I tried to delete the shortcut file then it prompt me to format my SD card. Then, I format it
but a pop-up message says, Windows was unable to complete the format. The Data and
free space of my Flash drive is 0 KB. What should I do?
Reply

I.C Tiempo

Hi Sandeep, please fit your SD card properly into your card reader before plugging it
in your PC. If nothing happens, try another Card reader or SD card, for you to know
which of the two are having issues. Just post a comment for any development.
Reply

36.

Boris
Finally! I finally got rid of this! Thank you! Incredible job which deserves appreciation.
Reply

I.C Tiempo

Hi Boris, am very glad to learn that this shortcut virus remover guide helped you
solved your shortcut virus problem. Thank you also for your compliments.
Reply

Joel Malupay

Thank you so much! Indeed, this is the most effective guide on removing
Shortcut Virus. At last I found this real shortcut virus remover tutorial. Keep up
the good work bro.
Reply

I.C Tiempo

Hello Joel, am very glad to learn that this shortcut virus step by step
guide help you removed shortcut virus by yourself.
Reply

37.

Prakasam
HFV has removed the virus without any issue
Reply

I.C Tiempo

Hello Prakasam, indeed HFV is one of the best shortcut remover.

Reply

38.

MarSha
When I right clicked trojorm remover in my pen drive, there is no open with notepad, only
open. So, I couldnt open it with notepad. What can I do to solve this? Pls help
Reply

I.C Tiempo

Hi MarSha, please refer to this guide https://www.techchore.com/how-to-unhide-yourfolders-and-files-hidden-by-virus/

Reply

MarSha

Thanks!
Reply

39.

Wallinson
Definitive solution to remove virus to create shortcuts and hides your folders . It also removes
the computer virus by preventing the virus back to the pen- drive.
Reply

40.

arilcastello
hey bro, already click the download link but it doesnt have the download thing. its just have
OPPS, theres a problem with your.. pls help asap.
Reply

I.C Tiempo

Hi Aril,
Sorry if you encountered issue on downloading the shortcut virus remover tool.
However, as I tried to download it, I found no issue. I made the download link direct,
in fact I paid extra bucks a month to make it more convenient to all users, so you
should download it without problem.
Reply

41.

Uy
where i can download the two file, the shortcut virus fiixfolders
Reply

I.C Tiempo

Hello Uy, simple follow this link and the instructions

given:https://www.techchore.com/download-fix-folder-trojorm/.
Reply

42.

Fadi
Wow..! Its work Thanks
Reply

43.

Pingback: Leobert

44.

Annie P. Alexander
Thank you very much sir for your short cut key virus 3.1 and Smadav 10.5. It really helped to
remove the viruses from my two important pen drives and made me happy.I am so thankful to
you sir.Amazing..
Reply

45.

DarkStar_993o
The shortcut virus is generated in my PC through C drive and creates shortcut viruses in any
external drive i plug in. They are not the usual .vbs files. I had some trouble with the shortcut
virus once before but i was able to remove it by just opening the properties of shortcut file
created and copying the name of the vbs script in the target and search my computer and
deleting it from everywhere but this the virus is generated on the drives with different and
long names every time i plug in and they usually are like this %%%%%oaiofop%%tdf%y%.1
they have .1 as extension so is there any way to remove this permanently? Thanks in
advance.
Reply

I.C Tiempo

Hi Darkstar, please follow the steps above carefully. Start from downloading Rkill up
to installing Smadav.
Reply

46.

Pingback: Robert

47.

Makki
THANK YOU SO MUCH
Reply

I.C Tiempo

You are welcome Makki. I am happy that this shortcut virus remover guide helped you
solved your shortcut virus problem.
Reply

48.

Hemanth

Hi,
I had a problem with my pendrive. It creates shortcut of all files and folders. however there is
no shortcut icon on my pendrive name/drive. i tried formatting the pendrive. even though
when i copy my new files onto it , once again it creates shortcuts. please help me fix this.
Reply

I.C Tiempo

Hi Hemanth, thank you for bringing here your shortcut virus problem. It seems your
computer is infected with shortcut virus, try to clean it first by following the guide in
this post (read the article from top to bottom). Surely, you will solve your shortcut
virus problem.
Reply

49.

Yaumil
Thanks a lot, this is the most complete tutorial on how to remove shortcut virus from my
PC/usb.
Reply

I.C Tiempo

Hi Yaumil, you are always welcome. I am glad that you found this shortcut virus
remover guide helpful on removing your shortcut virus problem.
Reply

50.

Judy
Thank you very much! This is the best shortcut virus remover guide I ever tried. It did not just
remove shortcut virus but as I followed the instructions from top to bottom of this post, the
shortcut virus was removed permanently and it never came back since then. Thank you so
much! Plus all of my files are recovered! Thank you!
Reply

51.

Abdul Ghaffar
Dear Sir,
I cant download the two tools, Trojorm Removal Tool and Shortcut virus fixfolder so I
downloaded the smadav antivirus software, installed it and then scan the memory card then
the shortcut virus has been removed and my memory card not making the shortcuts again
but the mobile is not accessing the card yet. Then I restore it to factory setting of mobile but
the same problem, my smartphone cannot access the card. Please help me
Reply

I.C Tiempo

Hi Abdul, you should be able to download the trojorm shortcut virus remover and fix
folder without issue. I checked the link and its fine. I am glad that you solved and
removed shortcut virus from your SD card or memory card. Regarding your issue,
please specify, does your SD card undetected by your phone or its detected but
inaccessible? Please check your memory card capacity and fit it properly in your
phone.
Reply

52.

Kaolin
after using HFV cleaner pro, the usb shortcut was gone but as I open the directory of flask
disk , there is this folder with no name but it has all my files. did HFV recover my files or
what ? please help me , I have my files there
Reply

I.C Tiempo

Hello, you dont have to worry anymore. All of the files inside your flash drive are all
your files. Its now clean.
Reply

53.

Anakin
Hey! , Thanks for posting this tutorial. As I follow youre steps , I tried using the HFV cleaner
pro, as I clean and unhide my flash drive , there is this folder with no name but inside of the
folder is my files. Is that folder my files or it is still virus ?
Reply

54.

Lenore
Thanks a lot sir.. I got my problem solved with Rkill and SmadAv. I finally found a solution to
my laptops shortcut virus. Your article is of great help. God Bless
Reply

I.C Tiempo

Hi Lenore, you are very much welcome. I am happy for you that you solved your
shortcut virus problem by yourself. Thank you also that you found this shortcut virus
remover guide useful.
Reply

55.

Mohamed Abidulla
Thank a Lot for this Tool. I am working as IT Manager and i was stuck with a pc having this
virus and i didnt want to spend a lot of time as i had other important things to do. Trojorm
Removal Tool did the trick for me.
Reply

I.C Tiempo

Hi Mohamed, am so glad that this shortcut virus remover guide helped you solved
your shortcut virus problem. You are always welcome Mohammed.
Reply

56.

Sidharth
Finally, something that worked!!! Excellent tutorial and guide. Keep up the great work.
Highly apprecriated!!
Reply

I.C Tiempo

Hi Sidharth, am glad to learn that this shortcut virus remover guide helped you
solved or removed the shortcut virus from your computer or flash drive and other
portable devices. Thank you also for the kind words.
Reply

57.

Momochi
what will happen if I used this command attrib C:*.* /d /s -h -r -s?
instead of f, I put C
what will happen?
Reply

I.C Tiempo

Hello Momochi, it will affect your drive C: or system drive instead of your portable
device.
Reply

58.

Jon

Thanks a milli. It worked like a charm

Reply

I.C Tiempo

Hi Jon, you are always welcome! Am glad that this guide helped you solved your
shortcut virus problem.
Reply

59.

Ronnie
Hi! I didnt get the link to download Trojorm Removal Tool and Shortcut virus fixfolder after
sharing it on Facebook. Can you please send me the link? Thanks!
Reply

I.C Tiempo

Hello Ronnie, you should see a download link for trojan remover and shortcut virus
remover tool after you share it in your favorite social media.
Reply

60.

Hiren
Thanks A Lot Brother
Your second option worked
Can see all the folders now
Reply

61.

Andrew
Hi, Thank you very much! This is the most comprehensive and effective tutorial on How to
remove shortcut virus. The shortcut virus remover you provide is great.
Reply

62.

Joel
Wow! Very useful site, trojorm virus removal tool really works on neutralizing shortcut virus.
Reply

63.

incrediblerachi
Great share
Reply

64.

Talha
Thanx man, it works perfectlythnk you so much.you are great
Reply

65.

Mojtaba Mahdian
I owe you a huge gratitude! Thank you so much! You saved my PC/Computer in a genius way.
Thanks a billion.
Reply

I.C Tiempo

Hello Mojtaba, you are very much welcome! Thanks also for such a very kind words.
Am glad to know that you solved your shortcut virus problem with the help of this
post.
Reply

66.

Cha

Good day Sir!

I encountered the same problem regarding the shortcut virus. However as i did the steps and
launched the smadav program, after clicking on fix for the heuristic files it said it found..
when i opened my usb drive, all sorts of folders came up but they were in a different label (?) i
tried clicking on them but it says the file is not accessible because the directory name or
volume label syntax is incorrect. Is there anything I could do to still recover my files at this
rate?

Reply

I.C Tiempo

Hello cha, just dont format your flash drive. Can you please send me a screen shots
of those said files? Have you also tried to download the trojorm and fixfolder tools? I
suggest, that you should run the two tools first.
Reply

67.

Tina
Hi there. Thanks for the tutorial on removing shortcut virus from flash drive. I used both the
trojorm removal tool and the fixfolder. I also used the HFV file. That didnt fix it. All that
happens is that another un-named folder appears on the flash drive. Double click on that and
another folder appears called recovered which then holds all the files
Reply

I.C Tiempo

Hello Tina, thanks for the comment. If you saw an unnamed folder and recovered
your files, it means that this tutorial works for you.The trojorm removal tool is
designed to disinfect shortcut virus and Fixfolder to recover or repair the damage that
shortcut virus done to your files. HFV also works the same way if the latter tools
wont work.
Reply

68.

Imtiaz Lalani
I have done the cmd process but its saying:
File not found E\*.*
My USB is connected with the laptop and i can access it from MY Computer then why is the
command prompt saying that it cannot find E.
Please Help
Reply

I.C Tiempo

Hello Imtiaz, please make sure that you type the right drive letter for your flash drive,
the letter that you see in my computer. Then in CMD window type that drive letter
eg. G: press Enter after that your command prompt will look like this G:\>, type
the command just next to it attrib g:*.* /d /s -h -r -s. Your final cmd line should be
like thisG:\>attrib g:*.* /d /s -h -r -s.
Reply

69.

Cyrillia
Sir, I cant thank you enough! OMG, this thread is really really helpful for me. I was almost
give up and get my computer fixed by technician (that would cost me money and lost all my
datas). But then, I found your website and I tried your guide and IT WORKED! My computer

now free from shortcut virus! Thank you, thank you, thank you! You are really helping me out!
Much respect and gratitude, Cyrillia.
Reply

I.C Tiempo

Hello Cyrillia, you are very much welcome!

Thank you as well with such

wonderful words. I am glad that this shortcut virus remover tips, helped you removed
shortcut virus by yourself.
Reply

70.

ahmed_eld
Hi Sir,
Thank you very very much for your respectable effort, your work helped me a lot,and thank
you again,..
Reply

I.C Tiempo

You are welcome Ahmed. I am glad it helps you solved your shortcut virus problem.
Reply

71.

Kamol
Great post. It is working..
Reply

72.

Arpit
Hello sir, I have the same problem but I am having a MacBook Air, is there anyway to fix this.
My flash drive is in the exFAT Format
Thanks.
Reply

73.

Suranjana
Thanks to this webpage, even an IT challenged person like me also removed the shortcut
virus from the USB but now there is nameless folder appearing in the drive and seems to
weigh 17gb (in my 64gb pendrive). The space remaining is still 4gb, i.e. what was before/
What does this nameless folder mean?
Reply

I.C Tiempo

Hi Suranjana, can you open the folder? So, without that folder before your free space
is 21gb?
Reply

74.

Paveeharan
Thank you very much for your help.
Reply

75.

BRIGHT
IT WORKS PERFECTLY THANKS.
Reply

76.

Michael

i have the problem shortcut virus on my FD, i have tried your two methods and also try using
HFV, but still my shortcut virus wont gone if i eject the FD and insert it again, i need your help
to fix my problem

Reply

77.

Jason Stanford
Thank you for such valuable content. Indeed, you helped me removed shortcut virus. Now its
permanently gone, shortcut virus never came back after following this shortcut virus remover
guide. Thanks a lot.
Reply

I.C Tiempo

You are welcome Jason, its good to know, I was able to help fixed your shortcut virus
problem.
Reply

78.

carrieclayr
thank you so much for your help!

Reply

79.

Mystique Beinq
Thank you very much for your help. That HFV really helps, it unhide all my file, and i was able
to recover them back and delete the virus. God bless you bro! You rock!
Reply

80.

suji
Sir, I have a problem of applications displaying in shortcut and some files too.
During sharing of files from one system to another its copying through shortcut only.
I need a solution to this problem.
Reply

I.C Tiempo

Hi suji, have you tried any shortcut virus remover guide above?
Reply

81.

Hayde
Thank you for this awesome Shortcut Virus Remover guide. keep up the good work. You really
helped me solved my shortcut virus problem.
Reply

82.

arindam
You Sir deserve respect! I used the command prompt method. Anyways, I was curious why the
virus still on my computer ? Please reply asap. Thank you!
Reply

I.C. Tiempo

Hello Arindam, thank you for such wonderful words. I appreciate it. Regarding your
shortcut virus problem, please download rkill andRogueKiller. Run the rkill first then
roguekiller after that download SmadAV, scan your computer and restart your
computer.
Reply

83.

Aritra

Sir, I have a problem of flash drive shortcut trojan. I followed all the steps but after Windows
Based Script Host I found this error message:http://postimg.org/image/yqrjk5ill/
Plz help me out. Thank you!
Reply

I.C. Tiempo

Hello Aritra, please make sure that you change the drive letter to your device drive
letter. If the problem persist, CHKDSK your flash drive or hard disk partition via CMD.
Reply

84.

Roach
Thank you, this is the best shortcut virus remover tutorial.
Reply

85.

Geovanny
Thanks for the tutorial, it helped with one of my FD. I left the other one in the computer for a
minute and it was infected again. I ran both the SmadAV and the HFV doing a full scan on the
computer and the drive but it keeps on getting infected.
I would appreciate any suggestions.
Reply

I.C. Tiempo

Hi Geovanny, thank you for your commendation. It seems that your computer is
extremely infected by shortcut virus, I will be updating this post soon to
accommodate such problems. However, for the mean time try this Download Rkill.
Run it to kill all hidden processes in your PC, dont restart your computer,
download malwarebytes and scan your all your drive partitions. Then, install SmadAV,
run and scan, restart your computer. Tell if it helps
Reply

86.

Ayan
It really worked. Thanks!

Reply

87.

Amit Agarwal
It works! Kudos to you! Keep up the good work.

Reply

88.

Romnick
Nice Job
This is the most effective How to remove shortcut viruses guide I ever

sought.
Reply

89.

Flavia
It worked! Yey! Thank you very much. Very helpful and well explained. Keep up the good
work!
Reply

90.

BILTU MITRA
Dear Sir
Few days ago when I was downloading data from my friends pen-drive, a file automatically

generated and I tried to remove it but to no avail. The files are

~DFB7B0A05800399107.TMP & DMI192D.tmp Sir please tell me how I can remove it. I
look forward to hear from you.
THANK YOU
Reply

I.C. Tiempo

Hello Biltu Mitra, it seems that you are having a temporary files. Normally, .TMP files
are created once you copy or download something in your computer. I think, you
dont have to worry. However, if really want to delete it, just make sure that no other
programs are using it. To be safe, restart your computer and boot safe-mode. When
your computer is in safe-mode, delete that temporary files.
Reply

91.

Danny
Thank you so much. It worked!
Reply

92.

Pingback: Richard

93.

Khalid
Hi
I tried above methods but they worked only for one refresh! Tried CMD, scan by MSE..all
useless for me. I tried download but link takes me to a page which no more exists. Could you
help?
Anyway, thanks for your efforts as it really has solved problems for many.
Reply

I.C. Tiempo

Hello Kalid, you can try SmadAV antivirus. Just let me know if it works.
Reply

94.

Romnick
Thank you, this is the most effective and fastest shortcut virus remover guide I ever tried.
More power
Reply

95.

Sandra
Wow! You saved my precious files and the shortcut virus is gone forever. Thank you!
Reply

I.C. Tiempo

Hi Sandra, thank you for the kind words. Just a reminder, there is no gone forever for
viruses such as shortcut virus. Please take a precautionary measures and read the
How to prevent shortcut virus at the later part of the article to keep you on-guard.
Reply

96.

MJ Gil
I tried your 2 methods and it still creates shortcuts

Reply

I.C. Tiempo

is it in my pc?

Hello MJ, it seems that your computer is extremely infected with shortcut virus.
Please download SmadAV antivirus, install it and scan all your drive partitions
including your file system.
Reply

97.

MJ Gil
Hi, is BitDefender a good anti-virus? Actually, I have an antivirus but every time i put a flash
drive in my PC it keeps on creating shortcuts and my antivirus cant fix the problem.
Reply

98.

Levi
Thank you very much, this helped me solve my problem!

Reply

I.C. Tiempo

Hello Levi, its good to know that this Shortcut Virus Remover guide helped solved
your shortcut virus issue.
Reply

99.

George Lotfy
Thank you very much for sharing info it works very well.
Reply

I.C. Tiempo

Hi George, you are always welcome, am glad that you solved your shortcut virus
problem with the help of this post.
Reply

100.

Vijay Patel

Thank you, for the solution. But I think this is not permanent solution
I tried this solution and it worked!!
But when I plug in my pen-drive into the Laptop, the shortcut appears again
so give the solution.
Reply

I.C. Tiempo

Hello Vijay, the shortcut virus problem solutions that this post provide is proven and
tested, as what you have said, it worked. However, it does not mean that your flash
drive will now immune against shortcut virus. If you insert it into infected computer,
laptop or netbook, still in can acquire shortcut virus. So, for precautionary measure,
please read the sub-heading how to prevent shortcut virus, at the bottom part of
this article. Thank you
Reply

101.

Sachin

This worked for me perfectly.

Reply

102.

Robert Sero

Tried. and the shortcut virus is now gone..

You have my deepest gratitude, thank you for this post
Reply

103.

Lisa

Hi, I just followed your steps and now all my files are deleted

Reply

I.C. Tiempo

Hello Lisa, this guide is meant to remove shortcut virus not your files. The above
steps doesnt even include deletion. I really wonder how it happened?
Reply

104.

Wendy

Thanks you so much for this article. Printed an article from my memory card in a business
centre and it was infected with the virus. Since it was an android phone, I was able to delete
the shortcut manually from the phone. However, when I connected the phone to my laptop
using USB, I couldnt view my files anymore.
Your wonderful article using method 2 CMD solved it ASAP.
THANK YOU ONCE AGAIN AND GOD BLESS YOU.
NB: I hope you have Jesus in your life.. That would be a great gift for you.
Reply

I.C. Tiempo

Hello Wendy, am glad I was able to help you solved your shortcut virus problem as
soon as possible. Indeed the CMD/command prompt method is the fastest way to
remove shortcut virus. YES! I agree, Jesus is the greatest gift of all.
Reply

105.

happy me

Thank you so much..

Reply

106.

Alfred

What a wonderful tips, it really works and works great

HFV shortcut remover, its superb. Thanks for your precious tips for us and God bless you
much more
Reply

107.

UP VETMED STUDENT

Thank you very much sir! I am from the Philippines, I am not computer savy but when I
followed your instructions it worked! I hope this would last for a long time. thank
you!

Reply

I.C. Tiempo

Hi, I am glad that this post helped you solved your shortcut virus problem. To keep
your computer or portable devices shortcut virus free just follow the How to prevent
shortcut virus tips, at the later part of this article.
Reply

108.

Romnick

Thank you so much, Shortcut virus is now gone.

Reply

109.

Jason

Thank you for this complete step by step guide on how to remove shortcut virus from, SD
cards, USB drive, Pen drive, Net-Book, Laptop, Desktop Computer and notebook. I successfully
removed shortcut virus from all the devices I mentioned above in just a matter of seconds,
not just mine but also to my friends and families devices that was infected by shortcut virus.
Many thanks to you bro
Reply

I.C. Tiempo

Hello Jason, thank you also for your kind words. I am glad, I was able to help.
Reply

110.

Abner

Thank you for this very helpful guide. I was able to remove shortcut virus in just a matter of
10 to 20 seconds. Thank you so much. More power
Reply

111.

youssef

Hey, none of the solutions work for me. Even the HFV, it cleans the flash drive for seconds
then every file and folder transforms to shortcuts again
Reply

I.C. Tiempo

Hello Youssef, everything is working fine. As what you have said, in just a matter of
seconds the shortcut virus is gone. However, the problem is, it keeps coming back,
right? It simply means that your computer is infected with shortcut virus, I suggest
you to download ESET NOD32. Install it and scan your computer, afterwards, follow
the steps above again.
Reply

112.

Zizzy

Hi, I already clicked on it before I saw this. What am I supposed to do now?

Reply

I.C. Tiempo

Hi Zizzy, no need to worry, simply follow the steps below to get rid of shortcut virus.
Reply

113.

Shaira

Best solution to delete shortcut generating virus from your computer.

Reply

114.

Maxwell

Hi buddy,
Thanks for the Trojorm removal tool. However, when I double-click on the Fixfolder VBS script
file, I get an error. I changed the Aphabet to J drive using notepad just like you said. But when
I try to execute, it gives an error.
Script: J:fixfolder.vbs
Line: 14
Char: 9
Error: Permission denied
Code: 800A0046
Source: Microsoft VBScript runtime error
Reply

I.C. Tiempo

Hello Maxwell, thank you for sharing your experience. Try to run it as an
administrator, if it works. If not, follow the command prompt method on how to
remove shortcut virus.
Reply

115.

Daniyal

I tried and it even worked but after plugging in the flash drive the next time. It came back. So
the solution was temporary. It is regenerating every after plugging in. Help me out with the
permanent solution
Reply

I.C. Tiempo

Hello Daniyal, if your system drive is infected with shortcut virus, every flash drive or
any portable storage device you insert to it will get infected. The best solution is to
download SmadAV antivirus and scan all your drive partitions and keep it in your PC
as preventive measure.
Reply

116.

kefayet

How can I remove pc shortcut virus ?

Reply

I.C. Tiempo

Hi Kefayet, everything is being taught above, on how to remove shortcut virus.

However, if your PC is critically infected, you need to downloadSmadAV antivirus to
scan all drive partitions in your PC. Then keep it installed to serve as your defense
against shortcut virus.
Reply

117.
Tricia Dator
It worked for me. Thank you very much!

Reply

I.C. Tiempo

Hello Tricia, I am happy that you solved your shortcut virus problem. You are
welcome.
Reply

118.

inivie

I.C Tiempo your the best, I cant believe I got rid of that virus so easy, thanks a lot I give you
FIVE STARS.
Reply

I.C. Tiempo

Hi Inivie, Im glad that you are able to get rid of shortcut virus easily by following the
guide above. Thank you also for your compliments.
Reply

119.

igfados

Thanks man you solved my problem but the virus comes back after I plug the flashdisk.
By the way, is this Indonesia virus made or just the antivirus was made by Indonesia?
Reply

I.C. Tiempo

Hello Igfados, you can install SmadAV antivirus, install it in your PC and scan all your
hard drive partitions. If it is still not working, try to download the ESet NOD32 trial,
have it install in your computer and scan your PC.
With regard to your question, I say NO, shortcut virus is infecting the whole world
not just in Indonesia, the origin of shortcut virus is unknown. The SmadAV antivirus is
made in Indonesia.
Reply

120.

Amr

Thank you for your advice. What has definitely worked for me was the CMD method but you
have to run it as administrator, then when you get the black dos window, type first the letter
of the flash/external drive followed by a column, for example F: (where F is the
flash/external drive), then the black dos screen will turn into F: , then simply type ATTRIB -H
-R -S /S /D. If you do this, you will see all your files inside the .trashes folder. Simply then,
copy all of them to your computer hard disk but not in your C (system) partition, then FORMAT
the flash/external drive and the computer C (system) partition, and install a new windows
operating system on your C drive and your nightmare is over.
Reply

I.C. Tiempo

Hi AMR, I appreciate your input but reformatting your system partition should be
done as last recourse. If you follow the methods that I shared in this post above, you
should feel safe now (no need to re-install your OS). To make you feel safer,
download free antivirus of your choice plus the shortcut virus remover,
either SmadAV or HFV.
Reply

121.

Peddaiah

Thank You for the article. We have learned a lot from it. It solved my problem.
Reply

I.C. Tiempo

Hello Peddaiah, you are welcome. I am happy to hear that you solved you shortcut
virus problem with the help of this post.
Reply

122.

Anwar Ch.

Thank you very much, my problem solved!

Reply

I.C. Tiempo

Hi Anwar, you are always welcome.

Reply

123.

Osama

I.C. Tiempo YOU ARE THE BEST Many Thanks.

Reply

I.C. Tiempo

You are welcome Osama, I am glad that you solve your shortcut virus problem. Thank
you for the compliments.
Reply

124.

Gerome

Thank you! This is a great guide on removing shortcut virus. I only need less than a minute to
remove shortcut virus. The Shortcut virus remover makes my life easy.
Reply

125.

Jonnalyn

Thank you for the shortcut virus removal tips. It helped me a lot, you saved my time.
Reply

126.

Adan

This is the best solution so far, on solving shortcut virus problems. Keep up the good work.
Reply

127.

Carlo

Thank you very much, my problem solved!

Reply

128.

Alquiza, Arvoi P.

Greetings Sir!
Just wanna say Thank you so much for this blog.
It helped me a lot

Reply

129.

Wassi

Thank you!!!!!!!!!!!!!!You just made my day.This shortcut virus made my life hell(slightly
exaggerating).But it did ruin my computer and flash drives until now. However, after following
the guide above,now its all gone!..All thanks to you..So thank you again..Your methods are
awesome!!
Reply

130.

Juste Leap

Oh my God!!!Thank you so so so muchYou saved my life!Ive been struggling with this

shortcut virus for a long time.I thought it couldnt be repaired.But then you came and saved
meThaks a lot!I owe you one

Reply

131.

Bikash

Im facing similar problem. I could remove the virus from my pen drive using the code and
running it from command prompt. However, the minute I open the drive all the files turn into
shortcuts. Looks like my pc is the source of this virus. What do i do to get rid of them from my
pc?? please help. Ive used windows defender (windows 8) to scan my pc multiple times but
the problem persists. it doesnt even detect the virus or may be im missing something. Thank
you for your help in advance.
Reply

I.C. Tiempo

Hello Bikash, I would recommend you to download SmadAV antivirusand use it to

scan your computer, all your hard drive partitions (c:, d: and more). You can also try
the HFV Shortcut virus remover (see the link above) or Eset Nod32 Antivirus (trial).
Then to prevent shortcut virus, keep either SmadAV antivirus or HFV in your PC.
Reply

132.

Hanna

Excellent shortcut virus remover guide!

Reply

133.

Kevin

Good day to you sir. I have encountered an error while running the fix folder, it says;
Windows Script Host
Script: D:fixfolder.vbs
Line: 14
Char: 9
Error: Permission denied
Code: 800A0046
Source: Microsoft VBScript runtime error
please help. thank you
Reply

I.C. Tiempo

Hello Kevin, did you open the fixfolder via notepad and have the drive letter change
to your device drive letter (eg. c:, d:, e:, f:)?
Reply

captor

Dear Sir ,
I am getting the error while run -fixfolder
Script: F:fixfolder.vbs
Line: 14
Char: 9
Error: Permission denied
Code: 800A0046
Source: Microsoft VBScript runtime error
Please help me
Reply

I.C. Tiempo

Hi Captor, try to run it as Administrator and see to it that you change the
drive letter.
Reply

john

Hi I.C. Tiempo I have the same problem as kevin does (Windows Script Host
error) and yes I runned the notepad as admin and then changed the letter but
still get the same error.So what can I do ? please
Reply

I.C. Tiempo

Hello John, it seems that your PC or Portable device is infected with

autorun.inf virus. I will be sharing on how to remove it in my upcoming
post. For the main time, download SmadAV Antivirus, install it and scan
all your hard drive partitions including all your USB portable devices.
Reply

john

OK. thanks so much

Reply

134.

Purple Anon

Hello. I tried Methods 1 & 2 but failed to do so. So I did the HFV thing and it worked. Does it
mean my device isnt infected with that virus anymore? Thanks a lot!
Reply

I.C. Tiempo

Hi Purple, yes, your device is now free from shortcut virus. To prevent shortcut virus
from infecting your devices or PC, just keep the HFV in your computer.
Reply

135.

oliver

Thanks. This is a very useful website.

Reply

I.C. Tiempo

Thanks for the compliments Oliver, am glad I was able to help.

Reply

136.

Alexes

Thanks a lot, it worked like a charm! Thank you very much!

Reply

137.

Lisa

My system got infected with this virus and when I called on the online technical support
department of AskPCTechies, they had resolved this issue the same way as explained above.
Reply

I.C. Tiempo

Lisa, I am happy to learned that they are using this article as reference, when they
are trying to help their customers on solving this kind of virus.
Reply

138.

suri singh

THANK YOU VERY MUCH SIR

Reply

I.C. Tiempo

Suri, am glad I was able to help.

Reply

139.

Puneet

When I attached my pen drive or card in my computer shortcut icons start appearing. I use
antivirus but no solution, please help me Sir .
Reply

I.C. Tiempo

Hello Peneet, just follow the simple solutions in this article and you will solve your
shortcut virus problem in no time. If you are not comfortable with following how-to
guide just download our shortcut virus remover, install or run it in your PC and
shortcut virus will be no more.
Reply

140.

Robe

Thank you so much! You saved all my precious files. I was able to remove shortcut virus using
your Shortcut Virus Remover with ease. More power.
Reply

141.

vikas

Hi! I followed the guidelines and the steps; I succesfully got the hidden .vbs file in my pen
drive plus the autorun virus. But the same file is not getting deleted. i tried smadav and the
software u mentioned but no deletion occured.
Reply

I.C. Tiempo

Hi Vikas, I am glad that you successfully solved your hidden files problem. Regarding
your shortcut remnants issue please try the HFV shorcut virus remover (see the link
above).
Reply

142.

mohammed

Thanks I will try this method on removing shortcut virus.

Reply

143.

dheeraj patidar

How to remove shortcut virus in my win8.1 Pleze help me.

Reply

I.C. Tiempo

Hello Patidar, just follow the guide above, it doesnt matter if your Operating system
is Windows XP, Vista, Windows 8, Windows 8.1 and even Windows 10. As long as you
are using Windows OS,the tutorial above will surely help you on how to remove
shortcut virus from your computer, pen drive, external hard drive, SD card and any
portable storage devices. If you are not convenient on following the guide just
download our Shortcut Virus Remover to remove shortcut virus easily.
Reply

144.

raneza

THANK YOU SO MUCH SIR. I SAVED MY FLASH DRIVE. THANK YOU!

GODBLESS!
Reply

I.C. Tiempo

Raneza, I am glad that you solved your shortcut virus.

Reply

145.

Zafar

I tried to download the file with the link provided after sharing your site on google. But the link
is not working.
Getting message Access Denied
Link: http://www.mediafire.com/download_repair.php?
dkey=cflc63dgcda&qkey=bbjbdis05e3gc94
PLease advise
Reply

I.C. Tiempo

Hello Zafar, sorry if you experience difficulties downloading shortcut virus remover,
but all you need to do is to wait for just a few seconds or you can refresh the link and
it will redirect you to the download area.
Reply

146.

sks

you are the saver bro!!!! thanx a lot for all these tutorialsthe HFV software worked like a
charm.thanks a lot:)

Reply

147.

Izzate Achu

Thats great to know, how to remove a shortcut..Excellent post with lots of useful information.
Reply

148.

Jian

Thank you very much. It helped me a lot the virus was totally lost No one is bothering me
now.
Reply

149.

Jaco

Hi there. I downloaded the HFV cleaner. I used the Hide folders option, now when I attempt
to unhide, the sofware cant detect my C drive?
Please assist as I have no folders to view on my PC system!
Kind regards
Jaco
Reply

I.C. Tiempo

Hello Jaco, please try the command prompt, replace the F: with C:. Read the guide
carefully above.
Reply

150.
Mini
Thank you so much!!!! I really appreciate the help!!

Reply

I.C. Tiempo

Hello Mini, you are always welcome. I am happy to learn that I was able to help you
remove your shortcut virus.
Reply

151.

Janet

Hello,I know absolutely nothing about computers except that I love mine and something is
wrong with my PC.I dont really understand these steps,it looks simple, I should be able to do
it but I keep getting lost.I cant send any file, it keeps turning to shortcut files and Im really
scared of my laptop crashing,HELP!
Reply

I.C. Tiempo

Janet, indeed the steps on removing shortcut virus is simple. In fact, it is very simple,
just follow the steps accordingly. Dont worry about your computer being crashed
because the guide above will never ever crash your computer even if you miss some
steps. Just a little courage Janet and all will be fine.
Reply

152.

mostafa

Thank you very much you are really great. You helped me not just of removing shortcut virus
but also recovering my important files and preventing shortcut virus from coming back.
Reply

I.C. Tiempo

Mostafa, you are welcome. I am happy to learned that you found this guide helpful on
solving your shortcut virus problem.
Reply

153.

Mazen

Thanks a lot you saved my life from my father, I was able to remove shortcut virus on his
portable device and recovered his files through the help of your post.
Reply

I.C. Tiempo

Hello Mazen, Im glad, I was able to help.

Reply

154.

piti

Life saver , thanks for the article !!!

Reply

155.
Naderzzz
Thanks a lot I.C

Anyway, the above methods works well in removing the shortcut virus infected files and
recovering back the infected ones, yet when I use the flash disk again, it gets infected. So, I
believe I have to remove the virus from the C or D drives themselves so do you know how ?
Reply

I.C. Tiempo

You are welcome Nader. To completely remove the shortcut virus in your hard drive
partitions, download and install SmadAV Antivirus. Run the SmadAV scanner, it will
automatically disinfect your drive partitions. Then, install antivirus of your choice
( please see the tags in the sidebar).
Reply

156.

Aser

Hey,
Can I just use HFV and ignore the other steps?
No offense but just to save time
Reply

I.C. Tiempo

Hi Aser, the most effective way to remove shortcut virus is by following the steps
above. However, you can try to jump on just using HFV but thats not recommended
because it has its own limitation. HFV is good on preventing shortcut virus but
sometimes it fails to remove shortcut virus without neutralizing it first.
Reply

157.

Gorkhali

Dear Sir, I have seven local disk drive . When I plug a pen-drive or memory card, shortcut files
and folder appears. I tried that code but it seems, its not working properly. Please help me,
Im using Windows 7 Ultimate, pen-drive location K:
Reply

I.C. Tiempo

Hello Gorkhali, please download SmadAV Antivirus (see the link above), install it and
run a scan on all your hard drive partitions. After the scan, download the trojorm

removal tool and shortcut virus fixfolder, then follow the instructions above. Once
done, dont forget to install antivirus in your computer.
Reply

158.

usama

Thanks man! for the help I just run the trojan remover and it removes shortcut virus from my
computer. Is this done or I need to do anything else?
Reply

I.C. Tiempo

Hello Usama, I am glad that you solved your shortcut virus problem but keep in mind
that it may infect your portable storage devices such as memory card, external hard
drive and computer again. It is a best practice to preempt it from coming back,
install SmadAV Antivirus as your primary defense and Antivirus of your choice.
Reply

159.

yogesh

I:stin.vbs
How to remove this virus please help me
it create shortcuts in my memory card please.
Reply

I.C. Tiempo

Hi Yogesh, please install SmadAV Antivirus. Then insert your memory card, it will
automatically remove stin.vbs and unhide your files.
Reply

160.

Nidarsha

I am Nidarsha. I am from Sri Lanka.I am 13 years old.Thank you very very much for saving my
computer from bad shortcut viruses. Thank you very much my dear uncle
Reply

I.C. Tiempo

Hello Nidarsha, you are always welcome kid. I am so glad to learn that my article
helped you solved your shortcut virus problem. Keep up that courage, while I am not
surprise that at your age, you have the guts to do the virus removal by yourself but I
am impressed your display of courage.
Reply

161.

swatch

just want to say THANKS

Reply

I.C. Tiempo

Hello Swatch, you are always welcome. I am glad that you solved and removed your
shortcut virus with the help of this article.
Reply

162.

jason2324

hi. huge help.much appreciated. just one problem though. a few folders did not come back.
Reply

I.C. Tiempo

Hello Jason, there were times that some files and folders may not be recovered, it
depends on the severity of shortcut virus infections you had in your PC or Flashdrive.
But its a very rare issue.

Reply

163.

chatty

Thank you it worked like a charm

Reply

I.C. Tiempo

Hi chatty, Its always been a good feeling to learn that another shortcut virus has
been resolved. You are welcome.
Reply

164.

abdu

thank you sooo much i would normaly just get my problem fixed and move on, but this was
just very very helpful, thank you from the bottom of my heart
Reply

I.C. Tiempo

Hello Abdu, you are always welcome. It is my pleasure to help you solved your
shortcut virus problem.
Reply

165.

Dnyanu Raut

Hi
my PC (Windows -7) was infected folder shout virus, I had tried 1st method for D: and E: drive,
it was successful removed virus,
Thank You very much.
but
virus is also present in C drive, what will happen when run Trojorm Removal Tool and
Shortcut virus fixfolder in C drive where windows 7.
Should I run 1 method in C: drive also? does system work correctly after run 1st method in C:
drive?
Please suggest me.
Thank you.
Reply

I.C Tiempo

Hello Dnyanu, thank you for using our methods here, on how to remove shortcut
virus. As with your drive c: concern, you can follow the same methods in removing
shortcut virus in your drive d: and e:..or you can just install SmadAV, update it and
scan your drive c:.
Reply

166.

Scoth Raymond

Thank so much for this information. Ill try the two method above and will get back if it works.
However, I have had an experience removing shortcuts from laptops/usbs (was in 2009, five
years gone and cant recall the procedure) all I can remember is by playing around with
start up programs and autoplay options in the control pannel.
This method Ive used was so simple and I urgently wish if someone knows this method would
help me out
Finally to the author of this post, if there is another way of removing shotcuts from laptops
and etcapart from the two methods youve outlines then theres the way out Im struggling
to find out.
Would you mind doing the right thing?
Thank you sir.

Reply

I.C Tiempo

Hello Scoth, If your computer or flash drive is infected with shortcut virus, the two
methods above is fully tested and will surely solve your shortcut virus problem. Plus, I
added the use of shortcut virus remover, you can use either HFV or SmadAV. Just give
time to read it carefully. However, if you encounter problem, feel free comment.
Reply

167.

Scoth Raymond

This comment has been removed by the author.

Reply

168.

Scoth Raymond

This comment has been removed by the author.

Reply

169.

Mahender Singh

Thank You So muuuuuuuuch. I recovered my important data. Thanks again.

Reply

I.C Tiempo

Hello Mahender, I am so glad to learned, that this post helped you out on removing
shortcut virus and recovering your important files. You are welcome and thank you
for your wonderful comment.
Reply

170.

Nishant Salhotra

bro i used the first method and recovered all the folders and their constituent files, so thanks
for that but all the mp3, mp4, other media files and word and subtitle files IN THE ROOT are
nowhere to be foundany help would be appreciated
Reply

I.C Tiempo

Hello Nishant, I am happy that you recovered your folders from the onslaught of
shortcut virus. About your problem, I recommend to try first the second method,
using the CMD command and tell me what happen. Good luck.
Reply

171.

Saefurrohman Dede

Thank you so much !!!

Reply

I.C Tiempo

Hi Dede, I am very glad that I helped you remove your shortcut virus through this
post. Thanks for dropping by.
Reply

172.

Badz

Ive done both but shortcuts are still appearing.

Reply

I.C Tiempo

Hello Badz, thanks for dropping by. Please take a look at Simons comment above and
the solution I gave him. It seems that you have the same problem, your computer is
infected with Shortcut Virus not just your Flash drive.

Reply

173.

ifeanyi simon

Irvin Chester Tiempo, am very grateful for your timely and accurate solution you gave me on
how to remove my shortcuts by those softwares you ask me to download.
i did and it worked, thanks once again.
but sir, i still want you to help me if there is a software i can use to recover my pictures i took
with my phone and when i want to retrieve them through my pc they refuse to display. i then
put the memory card inside my phone yet it cant display. pls help. i need those pictures so
much because they are so beautiful.
can thesame method above recover those pictures or do i need a special software to make
them display. thank you.
Reply

I.C Tiempo

Hi Simon, I am very glad that you solved your Shortcut Virus problem by following my
advice. On the other hand about your picture, if you can open your memory card
through card reader in your computer and the properties of your memory card shows
that there is a used space, then the method you used above is also your solution.
Reply

174.

NATASHYA

This comment has been removed by the author.

Reply

175.

ifeanyi simon

hi i did everything that method one and two then i discovered the files are separated one
there is no shortcuts and the other there is shortcuts then i try to delete them one by one but
as am deleting them they are coming back. please what is wrong? again clear me, do run the
fixfolder in my flash or desktop after open it through notpad?
Reply

I.C Tiempo

Hello Simon, you did what is right in removing Shortcut Virus. You should run fix
Folder inside your flash drive and follow the instruction above carefully. If shortcut
virus keeps coming back, the big tendency is your PC is infected by it. To solve that
issue, kindly download free antivirus, just click antivirus category at the sidebar, I
recommend Avira or Avast, support it with Malwarebytes 2.0.1 (@ anti-malware
category).
Install and update Antivirus & Malwarebytes, Then scan all your drive partitions, a
boot scan may be recommended in case of extreme PC shortcut virus infection.
Afterwards, retry the methods above, you can manually remove the shortcut files or
remove it via Shortcut Virus Remover,https://www.techchore.com/2014/05/shortcutvirus-remover.html
Reply

ifeanyi simon

ok sir, let me do that. thank you. i will get back to you.

Reply

176.

Angela Monalisa

Thank you!!! The trojan remover works for me, I actually tried to you cmd many times but the
annoing script kept showing up. Thanks!!!
Reply

I.C Tiempo

Hello Angela, I am delighted that I helped you solved your Shortcut Virus problem.
Thank you as well.
Reply

177.

waleed yossef

i have a trojan : trojan.ink.gen . and it do the shortcut problem i used ur tool but it gives
me error in the final phase after changing the drive letter .. i really dont know what to do it
Reply

I.C Tiempo

Hello Waleed, Trojan.ink is usually link to Shortcut virus that infects your computer or
Flash Drive and other portable devices. If you are having problem to remove Shortcut
Virus with the Shortcut virus removal tool use the command prompt as specified
above and in the Shortcut virus removal video tutorial.
Reply

178.

Crushed

Hi,
I am trying to run malwarebytes, but I ran into runtime errors (57:177 and 49:252). I uninstall
malwarebytes using mbn-clean.exe. I download malwarebytes 2.0.1 and changed my folder
options. I changed the name of the malwarebytes 2.0.1.exe to SWEEP.com. I tried to run the
proggram but i got a ShellExecuteEX Failed; code 115. No application is associated with the
specific file for this operation. message. HELPPPP!!!!!
Reply

I.C Tiempo

Hello Crushed, I appreciate your trust, but you post your question in the wrong page.
This article is all about Shortcut Virus. Nevertheless, please see my answer in the
right place.
https://www.techchore.com/2014/04/malwarebytes-runtime-error.html
Reply

179.

Ahmed Awny

I LOVE YOU SO MUCH

Reply

I.C Tiempo

Ahmed, I am happy to help you solved your Shortcut Virus problems.I appreciate your
commendation.

Reply

180.

Hamza Arshad

can you tell me one thing that if i reinstall windows will it be cured . Does it affect C: windows
drive only or other drives also ?
Reply

I.C Tiempo

Hi Hamza, this post guides you to remove shortcut virus without reformatting your
PC, to prevent data losses. But if you really want to reinstall windows, yes, it will
totally remove any viruses not just shortcut virus. Shortcut virus, mainly affect drive
c: but it can also infect other drive partitions.
Just a tip, after installing your windows, simply install antivirus and free
malwarebytes first, update it before opening any files, folder or any drive partition to
prevent any malicious script left-over from running.
Reply

181.

Hamza Arshad

how to remove it from mypc or does it affect pc speed..

Reply

I.C Tiempo

Hello Hamza Arshad, as what I have said Shortcut Virus has two variations. If you are
infected by the Shortcut Flashdisk Virus, you dont have to worry because the
method 2 above will erase it. However, if you are infected by the Files and folder
Shortcut Virus, still the method two will help you unhide your original files. But you
have to remove those Shortcut Virus manually, by deleting it one by one or install a
good Antivirus to delete it all automatically. I am personally using NOD32 but avira is
a good alternative, just check my posts on free Antivirus. With regard to your
question if shortcut virus slows your pc? In my experience the Flash disk Shortcut
Virus doesnt affect your pcs performance but the Files and folder shortcut virus
does slows your computer, since it duplicate itself and eats your your hard drive
storage space.
Reply

jerni

Sir, I want to remove shortcut virus for my files and folder in usb help me I
am fed up with that shortcut viruses.
Reply

I.C. Tiempo

Hello Jerni, everything is already explained above. Please have

sometime to read the how to remove shortcut virus guide carefully.
You can also use shortcut virus remover(s) as your immediate solution
on getting rid of it.
Reply

182.
miss
Thank you for having a big heart in sharing this! More blessings be upon you.

Reply

I.C Tiempo

You are welcome Miss and thank you for that wonderful comment. I am very glad that
I solved your Shortcut Virus issue. More power to you also.
Reply

183.

spal

all originals gone and now its just shortcutssolve

Reply

I.C Tiempo

Hi Spal, have you tried to check your flash drive or hard disk properties? It seems
that youre files are hidden by files and folder shortcut virus. Its another shortcut
virus variation. However the method 2 above will surely help you. Just follow the
instructions correctly. Then get back, if there is still a problem.
Reply

184.

I.C Tiempo

Thanks for the commendation zeeshan macknojia!

Reply

185.

zeeshan macknojia

Thanks for your such an informative and lovely blog. I really appreciate you LCD BEZEL
Reply

186.

I.C Tiempo

hello Chiji, Im glad I helped you!

Reply

187.

I.C Tiempo

Hi Gashaw Lulie, thank you for the compliments. There is no need for detailed instructions
since I explained it already in method 1. However, if you are a bit confuse let me expound it a
bit. In Trojan remover, just run it inside your flash disk. About the fix folder, before running it
inside your flask disk, right click it first then click open with.choose notepad..then look
for the cDrive = H:.now change the H: with your flash disk drive letterThen save the file
and you can now run it to fix your problem..
Reply

jj

Hi Sir where can I download the software and the name of the software?
Reply

I.C. Tiempo

Hello JJ, everything is in the guide above, just read, it will guide you where and
how to download shortcut virus remover.
Reply

188.

Chiji

Wow Finally Got it, This is very useful to solve this shortcut virus
Reply

189.

Anonymous

this is Gashaw Lulie from Ethiopia

thank you for your support
please tell me the detaile steps performed on each of the two tools
thank you
Reply

190.

I.C Tiempo

Its my pleasure to help you Brix & every individual solved their tech problems! thank you also
Brixton for dropping by!
Reply

FRANK

Thank you so much Sir! I was able to remove shortcut virus and recovered all my files
with the help of this article. GOD BLESS.
Reply

I.C. Tiempo

Hello Frank, youre always welcome. I am happy that you found this tutorial
helpful on solving your shortcut virus problem.
Reply

191.

Brixton Lao

thank you so much sir you made my day!

Reply

192.

I.C Tiempo

You are always welcome Mohammed, at least this article serves its purpose, that is to help
everybody else solve their tech problems, shortcut virus is just one of it..
Reply

193.

Mohamed

Thanks a lot, for this solution/fix since I have the exact same problem this was very helpful
wish u the best
Reply

194.

I.C Tiempo

Its good to know that this article helped you solved your problem, thanks for dropping by
Reply

195.

Anonymous

YOU ARE A SAVIOUR!!!! THANK YOU SO MUCH!!!!!!

Reply

Leave a Reply

Post Comment

Sponsored links

Search

Popular

Recent


How to Remove Shortcut Virus Permanently | SOLVED!

SmadAV Antivirus 2016 Latest Version | Download

How to FIX Google Play store?

Facebook not loading properly: Solved

How to unhide your folders and files hidden by virus?

Next
Sponsored links

Top Rated

Recent

Google Chrome OFFline Installer | Latest Free Download

Rufus latest version|Download

EaseUS Todo Backup 9.1 FREE Download and Review

RogueKiller latest update Download Now

RKill latest Update|Download

Next

FIND US ON FACEBOOK
Techchore Copyright 2016.

FacebookTwitterGoogle+Share

iTechFever
Y
our Tech Mate

HOME

ABOUT

TIPS & TRICKS

SECURITY

FACEBOOK

VIRUS FIX

COMPUTER FIX

CONTACT US

How to Remove Shortcut Virus from USB Flash

Drive and Computer.
By: Sandeep Singh | Last Updated: July 21, 2016 114 Comments
Pendrive, SD Cards or Flash drives are very common device to transfer data from one computer to another, also
sometimes we get errors while connecting Pendrive to Computer and during data transfer one of them is Shortcut
Error, basically, this is a Virus known as Shortcut virus, it converts every file into shortcut in Pendrive / Hard drive,
this article will guide you to remove shortcut virus from your flash drive as well as computer.

What is Shortcut Virus and How does it Spread.

When we connect a flash drive to an infected computer and transfer any file it automatically infect Pendrive and
all files shown as Shortcut. This virus can affect any external storage like Flash Drives, External Hard disk, Phone
Memory, Memory card or any Memory Stick, this is an anonymous malware which initially released online and
spreading from one computer to another and we got Shortcut of files which are in USB drive if you try to open
any file you will get error message.
You Can See How Files are Showing in Removable Disk (D:)

How to Remove Shortcut Virus From Pendrive /

USB Drive.
If your USB drive doesnt have important files you can try to Format it, but if it contains important files then you
are not going to format it, to Remove Shortcut Virus follow the Steps Below.
Step 1. Go to Start and Search for cmd, as it appears in start menu Right Click on it and Click Run as
Administrator
Step 2. Navigate to Flash Drive by typing its letter. [ Lets Say it is i ], to find your USB drive letter open My
Computer and check for letter, type i: and hit enter.
Step 3. Type del *.lnk (without quote) in cmd window and Hit Enter on your Keyboard.
Step 4. Now type attrib -s -r -h *.* /s /d /l ( without quote ) and hit Enter .

It will take few seconds to recover all your files, Now open your Flash Drive you will get Back all of your files.

How to Remove Shortcut Virus from Computer.

Once you recover files into USB drive you can use them but if you again plug in USB Flash drive into the infected
computer your flash drive will infect again, so it is better to remove the source of this virus i,e infected the
computer, follow the steps below to remove shortcut virus from the computer.
Step 1. First open Task Manager by pressing Ctrl + Alt + del Or Right Click on the taskbar and click on Task
manager.
Step 2. Go to Process tab and look for process Wscript.exe, Scroll down and find any such process, Now Right
Click on it and Click on End Task.
Step 3. Now go to Start and search for regedit, open it you will get Registry Editor navigate to
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run
Here look for Registry Key odwcamszas if found then right-click on it and delete this registry key.

This will remove Shortcut Virus from your Computer, if not then try these steps.
1. Press windows + R key, you will get Run box, type %temp% here and hit OK, now temp folder will be open
look for file nkvasyoxww.vbs and delete it.

2. Go

to C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start

Menu\Programs\Startup. Check

Startup folder if nkvasyoxww.vbs exist here then delete it.

3. Press Windows + R key, type msconfing into the run dialog box and hit OK, it will open System
Configuration, Go to Startup tab, and look for nkvasyoxww.vbs uncheck it from startup and hit OK.
There may be a different name for the VBS file, just make sure you dont have any file with an unusual name and
VBS extension at the startup, registry, and temp folder.
In Windows 8, Open Task Manager and go to Startup tab, disable nkvasyoxww.vbs from here.

Watch Video Tutorial to Remove Shortcut Virus

This will remove Shortcut Virus from your Computer or Laptop if you face any problem feel free to comment
below.
Make sure you have complete protection installed into your PC like Kaspersky Total Security or McAfee Total
Protection if not please download and install Kaspersky Total Security/ McAfee Total Protection or any other
antivirus which provide protection from all kind of threats.
Or you can also install a good free antivirus program but be having a full version of an antivirus give you a piece
of mind and you stay safe from different types of malware like a virus, trojan, rootkit etc.
30 0

Share0 32

Related

How to Enable and Disable Write Protection of USB Flash Drive

In "Tips & Tricks"

How to Create a Fake Prank Virus Awesome and Harmless

In "Tips & Tricks"

Antivirus Buying guide - Things to Know Before Buying Best Antivirus Software
In "Tips & Tricks"
PROMOTED CONTENT
by

Green coffee adalah cara termudah untuk menurunkan berat ...

Turun 23kg dan fatty liver sembuh

Dulu dia hanya buruh pabrik, sekarang dia punya lamborghini

Penurusan badan bagi pemalas di rumah!

Cara dapatkan 59 juta di Indonesia tanpa pekerjaan?

Cara menghilangkan lemak dari kaki, dan perut cepat?

Kini Anda Bisa Memiliki Income Rp. 30 Juta Rutin Tiap Bulan!

Sexy Stars Who Love Showing Off Their Curves

Comments

1.

akash says
April 28, 2014 at 8:26 PM
wscript is not found in my pc
Reply

sandeep singh says

April 28, 2014 at 8:56 PM

Please delete all temporary files from your temp folder.
Reply

akash says

April 29, 2014 at 8:57 AM

whn i typ del *.lnk it shows it is not recognised as an internal or external command,operable program or batch file
plzz help mee plz
Reply

sandeep singh says

April 29, 2014 at 9:02 PM

First navigate to your pen drive and then type del *.lnk it will delete current shortcuts.
Reply

Ace Spirit says

May 18, 2016 at 5:20 PM

i did every step but when it comes to del *.Ink it says Could not find M:\*.Ink

Abdul Basit says

August 26, 2016 at 7:29 PM

It deleted all my data which was contained in the shortcut :/

alex says

July 2, 2015 at 4:43 AM

Can you please specify which temp folder? ive deleted some from a certain temp folder, but Wscript.exe still
wont appear!
Reply

Sandeep Singh says

July 2, 2015 at 11:05 PM

Press win+R key, it will open run window type %temp% and hit OK and you will get Temp folder.
Reply

2.

orlando says
August 13, 2014 at 3:25 PM
Thank you. It help me a lot. the short cuts in my usb/ flash drive have been removed.

Reply

3.

geleen joy torres says

September 2, 2014 at 9:13 PM
i follow it now im hoping to fix the problems of my loptop thankyou
Reply

4.

geleen joy torres says

September 2, 2014 at 9:15 PM
thank you for you help sir
Reply

5.

geleen joy torres says

September 3, 2014 at 6:34 AM
the virus are still there whenever i open my computer.
Reply

6.

geleen joy torres says

September 3, 2014 at 6:34 AM

the virus are still there whenever i open my computer.

Reply

7.

dimitri says
September 5, 2014 at 10:54 PM
i really appreciated the second steps! it really works for me! Thanks for everything. this virus is really really sucks
for me and for my computer. this virus came from my Friends Flashdisk.
Reply

8.

jannick says
September 10, 2014 at 12:47 AM
hello, when i type attrib -s -r -h *.* /s /d /l it says that invalid switch / l. what to do plz help
Reply

sandeep singh says

o
September 10, 2014 at 1:16 AM

Make sure CMD is running as Administrator and try again.

Reply

omar mokhtar says

May 19, 2015 at 8:14 PM

i ran it as adminstor but it still in valved
Reply

Bharat says

February 20, 2016 at 2:26 PM

have u left spaces between /s /d /l?

it told me the same thing and i corrected the spaces. it ran after that
Reply

warren says

July 31, 2015 at 2:02 PM

im using win 8 how can i run as admin the cmd?

Reply

Sandeep Singh says

July 31, 2015 at 4:39 PM

Search for cmd and right click on it > Run as administrator.

Or Press win +X key and choose cmd admin.
Reply

Bhanu says

October 28, 2015 at 10:53 PM

Bro..it deleted all the datawhen I used del *.lnkplz help if data can be recovered
Reply

9.

ranjan says
September 11, 2014 at 10:32 AM
It is still there..
Reply

10.

ranjan says
September 11, 2014 at 10:50 AM
Hw to remove permanently?
Reply

sandeep singh says

o
September 11, 2014 at 3:01 PM

Kill the process wscript from task manager and then delete shortcut virus.
Reply

11.

Eranda Gunathilaka says

September 22, 2014 at 8:40 PM
Some times difficult to use because of codes. It gives errors many times.
This worked for me. Shortcut Virus Remover. It is easy to use and free.
Reply

12.

Surinder Dhiman says

September 28, 2014 at 2:56 PM
shortcut delete simpal mathad (1)go tu task manager enter
(2)End Task Wscript.exe file
(3)and your pendrive SD Card connect your Camputer Leptop and select all shortcut and delete all shortcut your
problam solve it Surinder Dhiman
Reply

13.

wasim says

October 11, 2014 at 5:06 AM

pls note after removing link files by *.lnk my all file link are removed from the usb drive.
after that i did the attrib -s -r -h *.* /s /d /l now in my use all files are removed. pls help ..what to do to restore my
files???
Reply

sandeep singh says

o
October 11, 2014 at 2:32 PM

Re-Insert flash disk, kill the process wscript from task manager, make sure files are not hidden.
Reply

Simon Odihi says

March 16, 2016 at 1:36 AM

I will like to know what you mean, when you say; kill the process, because i dont really understand it. Thank you
so much.
Reply

Sandeep Singh says

March 16, 2016 at 2:42 PM

Killing a process means, open task manager > Right Clik on Process and hit End Task
Reply

14.

yasir says
October 13, 2014 at 3:49 PM
when i format it says that my disk is write protected. i could not use any either of the method you shows me.
please tell me how to fix my problem. its full with viruses
Reply

15.

EJ Bautista says
October 14, 2014 at 1:43 PM
It turns out that my computer was infected by this. I keep reformatting my flash drive but it just keeps on
returning. Thats when I decided to look inside my machine, and there it was. Thank you so much for this tutorial!
Reply

16.

Michael says
November 17, 2014 at 10:52 AM
thanks for this, it helps me a lot..

Reply

17.

Ravi says

as i expected it really works..

November 27, 2014 at 10:12 PM

This works. You can also do it by using USBFIX. Check this out http://bit.ly/1rz22mh
Reply

18.

Faheem says
November 28, 2014 at 10:13 AM
Hi, dear please find me solution:
I just follow the procedure, i opened the directory and follow the path:
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run.
I found tkgrklxjri.vbs (value set as wscript.exe //B C:\Users\FAHEEM~1\AppData\Local\Temp\tkgrklxjri..vbs)
file instead of odwcamszas. so what to do now??
Reply

sandeep singh says

o
November 28, 2014 at 12:54 PM

Delete that registry key and also delete that file form AppData.
Reply

19.

Axe says
January 9, 2015 at 1:54 PM
help its says invalid switch /l
Reply

20.

Abdullah says
January 12, 2015 at 10:12 PM
cant find this when i open run in windows version (odwcamszas)
Reply

21.

SYED HASNAIN AHMED says

January 14, 2015 at 9:18 PM
THANKS BRO
I KNOW ALL STEPS OF CMD TO REMOVE SHORTCUT
BUT NOT ABOUT WSCRIPT PROCESS
THANKS YOU HELP ME ALOT
Reply

22.

Damitha says
January 15, 2015 at 11:32 AM
hi, pen drive thing worked but cant found any of files in my PC idk wht to do
Reply

23.

sami says

January 16, 2015 at 11:14 PM

sir after giving the fist command in cmd, system replied that it iz write proctected
Reply

sandeep singh says

o
January 17, 2015 at 8:06 PM

You need to remove write protection from your flash drive, read it here-http://www.itechfever.com/disable-writeprotection-usb/
Reply

24.

Nay Min says

January 23, 2015 at 9:16 AM
Thank a lot
Reply

25.

Arfa says
January 30, 2015 at 1:41 PM
My drives have been infected with shortcut virus, when i open a folder, there is a shortcut of the same folder
present inside it, tried removing it and when i restart it comes back. AVG does detect it and removes it but it
comes again. Even in my usbs, it goes away and then comes back again. My files dont get hidden but a shortcut
folder of the same name gets created inside it.
Reply

Bob Gaius says

o
March 6, 2015 at 4:27 AM

I have exactly the same problem. My PC is running on windows 8.1.

Ill be eternally grateful if I can receive assistance.
Reply

Arfa says

March 9, 2015 at 1:26 PM

I had to re-install my windows!
Reply

26.

Bob Gaius says

March 6, 2015 at 10:33 PM
I have to give a thumbs up to you for this lovely information.
I tried all the methods given but the problem persisted.
Out of curiosity, I just decided to perform a Boot-Time Scan with Avast Premier and it seems to have worked but
Im not 100% certain if itll solve the issue forever. Your feedback is needed.
Reply

27.

Noel says

March 14, 2015 at 7:03 PM

Hi! I cant find Wscript.exe on my computer, and i cant also open the regedit on START.Please help me to solve
the problem the shortcut virus on my computer.
Many thanks.
Reply

28.

Adnan says
March 27, 2015 at 5:38 PM
Impressive. Works very well
Reply

29.

christian says
April 3, 2015 at 10:56 AM
thanks! it worked. I finally removed the shortcut virus, its name is sv.vbs!
Reply

30.

shariq says
April 6, 2015 at 1:52 AM
i can not remove shortcut virus .. After applied your query ????
Reply

31.

Harris says
April 12, 2015 at 12:58 PM
I have followed the steps and after I type the attrib thingy it says access denied and when I look to my folder my
filed arent there anymore. They were in shortcut but I could still see them. Now I cant anymore. Please help I
have a lot of valuable info
Reply

32.

mostafa says
April 12, 2015 at 1:45 PM
i tried everything but seems that the virus isnt in my laptop because i didnt find odwcamszas or
nkvasyoxww.vbs or wscript ,Its on my usb,but when i try to type attrib -s -r -h *.* /s /d /l it says access denied
Reply

33.

Tharun says
April 16, 2015 at 3:50 PM
i didnt find any name like odwcamszas or nkvasyoxww.vbs anywhere in mt lappy but still virus exist in my
system what sholud do now.
Reply

Sandeep Singh says

April 16, 2015 at 4:07 PM

Download and run Hitman Pro once.
Reply

34.

Grace says
April 29, 2015 at 5:10 PM
I followed the instructions exactly, I ran cmd as administrator, and type the exact command. I waited for the new
command line before I checked the drive, but still everything is in shortcut. Dunno what happened. Repeated it
three times, but it still did not work. I may be doing something wrong. Need your help.
P.S. The drive Im fixing is a my phones memory card.
Reply

35.

Lealyn says
May 5, 2015 at 1:28 PM
How do I take out the shortcuts on my USB, I tried to take out the .lnk but it says invalid switch
Reply

36.

omar mokhtar says

May 19, 2015 at 8:47 PM
sorry but i find it in iexplore file
what should i do
Reply

37.

Shoaib Prince says

June 7, 2015 at 5:41 PM
Sir plz help me i lost my very important data when em giving your instruction there write invalid stiwch
Reply

38.

camching06 says
June 9, 2015 at 5:15 PM
Hello all. just figured out how to remove the shortcut from my USB flash drive. My problem was when i insert my
USB stick the first thing that you will see is only a shortcut of your USB drive and when you open it shows all your
file.
What i did is installed roguekiller and let it do its thing in your computer. I saw it killed Trojans and other malware.
Next is simple go to your USB and open the shortcut. Cut all the files, go back and delete the shortcut then paste
your files. Then problem solved.
You must kill the Trojan first using the roguekiller before doing the cut delete paste, or else the shortcut will just
keep coming everytime you stick your USB flash drive on your computer.
What a relief. I am very happy.
Special thanks to roguekiller.

Reply

39.

BEHROZ says
June 17, 2015 at 2:56 PM
thanxs bro!!!! i have tried almost 20+ methods but nothing worked.
this method really helped me to get solution of this shortcut removing.
Reply

40.

vaibhav meena says

June 27, 2015 at 4:06 PM
thank you !!!
Reply

41.

Ayan says
June 30, 2015 at 1:28 PM
Your solutions were helpful. Thank you!!

Reply

42.

adam says
July 2, 2015 at 1:55 AM
hi, there is no Wscript.exe when i open processes in task manager?
Reply

43.

martolito says
July 10, 2015 at 4:12 AM

followed your article and the shortcut virus is long gone from my computer, cant wait to share this with friends,
thanks so much man.
Reply

44.

faslu says
July 14, 2015 at 4:40 PM
thanks done:)
Reply

45.

Ruban says
July 19, 2015 at 11:40 AM
Chance Less Great Post WorkS Fine.
Thank You
Reply

46.

XY says
July 24, 2015 at 3:01 AM
Thank you this was really helpful had been struggling with this mine had hidden itself as csrss in c:\z
Reply

47.

Jed says
August 7, 2015 at 6:59 PM
I Follow all the steps but still the same.

Reply

48.

yanyan says
August 9, 2015 at 6:33 AM
i cant remove this FXSAPIDebugLogFile from my temp folder it says that its open by windows explorer.
Reply

49.

Tenten says
August 10, 2015 at 11:59 PM
What If I cant find the nkvasyoxww.vbs?
Reply

Sandeep Singh says

o
August 11, 2015 at 4:58 PM

It may be by another name, find the suspicious processes and search them on Google and remove accordingly.
Reply

50.

azlan says
August 18, 2015 at 6:12 PM
i have do all the step on how to remove short cut virus from pendrive /USB drive..but its still come back..why??
its just work for a few second,then the short cut come again
Reply

51.

saqib rehman says

September 12, 2015 at 1:50 PM
hi any one can help me to new attrib code for unhide data pen drive please send me this code thank you
Reply

52.

ahmed_eld says
September 12, 2015 at 10:52 PM
Hi,
thank you very very much .your work helped me alot
Reply

53.

Amri says
September 16, 2015 at 7:12 AM
Hi,
im not fine this file on my windows 7 home basic(in registry,tmp folder and etc)
you have any solution for me ?
Reply

Sandeep Singh says

o
September 16, 2015 at 1:37 PM

Open the taskbar and check the running processes, look for any suspicious program ( generally these programs
have weird name) or look them into google, Now right click on it, open file location and delete them.
Reply

54.

Pervinder says
November 28, 2015 at 10:43 PM
i have searched for nkvasyoxww.vbs but i didnt get what should i do
Reply

55.

rami says

December 3, 2015 at 6:07 PM

great post ahhhhhhhhh
Reply

56.

showkat wani says

December 6, 2015 at 12:29 PM
excellent information n extremely helpful. Thanks sir for I was torched with this bloody shortcut.thank u again
Reply

57.

Ahmad khalid says

December 8, 2015 at 8:25 PM
This blog has informed wrong information.None of it worked on Windows 7.
Reply

58.

Dinesh Verma says

January 3, 2016 at 11:05 PM
Thanks guys it worked like a charm. These viruses were killing my brains out.
Reply

59.

ram says
January 21, 2016 at 6:58 PM
use usbdisksecurity
it will prevent any autorun and shortcut virus first step defence.
use with your antivirus no problem.
Reply

60.

Akshay ashok kale says

February 26, 2016 at 5:33 PM
thanks for the help
i like your blog
Reply

61.

Ayaz says
February 27, 2016 at 8:18 PM
I like your blog
Reply

62.

Snoop mark says

February 28, 2016 at 2:29 AM

I got dis shortcut virus from a friend of mine. The virus was eaten through my system , until i found this tutorial. It
has really saved the live of my system. Tnks a lot guys
Reply

63.

norbier ortega says

March 8, 2016 at 5:19 PM
thanks, it helped me a lot!
Reply

64.

erz says
March 9, 2016 at 5:26 PM
it shows it is not recognised as an internal or external command,operable program or batch file when i put the
letter of my usb. what should I do? I did make sure that it is running as administrator but still please help. thank
youu so much.
Reply

Sandeep Singh says

o
March 10, 2016 at 1:39 AM

Write the exact command and try again.

Reply

65.

john says
March 12, 2016 at 6:56 PM
Good post
Reply

66.

arindam says
April 10, 2016 at 7:07 PM
Bhai u are a genius u are like a god to me very good
Reply

67.

chandrakala says
April 21, 2016 at 1:03 PM
the comman attrib -s -r -h *.* /s /d /l is not regonized as an internal and external command. now how the shortcut
virus will be removed from my usb drive
Reply

68.

ABDULLAH BHUTTO says

May 2, 2016 at 6:35 PM

It is showing invalid swicht /l what can i do plzz help meeee fast plzz
Reply

Sandeep Singh says

o
May 4, 2016 at 1:41 PM

Check the command properly and try again.

Reply

69.

Sara says
May 3, 2016 at 6:11 AM
When I entered del *.lnk, I got Access Denied. I am running as admin
Reply

Sandeep Singh says

o
May 4, 2016 at 1:43 PM

Make sure you are running cmd as admin in the user account which has administrative privileges.
Reply

n says

May 11, 2016 at 7:09 AM

how will i remove it?
do i need to do the remove shortcut virus from computer steps?
Reply

70.

n says
May 3, 2016 at 1:52 PM
the shortcut in my flash drive was remove but when i plugged it to other computer it will appear again. hows that?
please reply
Reply

Sandeep Singh says

o
May 4, 2016 at 1:40 PM

You need to remove the associated virus from computer too.

Reply

n says

May 25, 2016 at 1:39 PM

how will i remove it?

do i need to do the remove shortcut virus from computer steps?

Reply

71.

Be says
May 30, 2016 at 6:42 PM
i did this with my usb and glad i managed to restore all files..but unfortunately i could not read all of them since i
get the message thats the files are corrupt.What do i do?
Reply

72.

Adnansayed says
June 19, 2016 at 3:34 PM
thanks ,,it worked for me..
Reply

73.

Mahendiran says
June 25, 2016 at 9:39 PM
When I Type the comment del *.lnk It says access is denied even thought I am running cmd prompt as an
Adminstrator. Please help
Reply

74.

Adit says
July 26, 2016 at 7:58 AM

Thank you, 100% worked for me..

Reply

75.

sumit says
August 17, 2016 at 8:17 PM
buddy im not able to delete shortcut virus from my USB drive . i had tried windows + R 7 followed every steps
but yet not able to delete it . plz help me on this .
Reply

Sandeep Singh says

o
August 19, 2016 at 1:44 AM

If you dont have important data into flash drive then you can try formatting it, and also remove shortcut virus from
the computer.
Reply

Raston Luhoha says

August 31, 2016 at 12:36 AM

Thank you sandeep singh it works perfect my friend

Reply

76.

Phumelele says
August 20, 2016 at 8:51 AM
thank you it worked.
Reply

77.

Gene says
August 22, 2016 at 4:09 PM
mine is not a shortcut link file but it create an automatic folder name driver that is on read only even after
formatting. help pls
Reply

78.

Ram says
October 12, 2016 at 10:46 AM
None of this is working.Plz post a new method.Thank u.
Reply

79.

Shubham kumar says

October 15, 2016 at 11:22 AM

Shortcut ke sath me application type ka folder ban jata hai to kya kare plese help me because my important file is
in there
Reply

Sandeep Singh says

o
October 17, 2016 at 11:14 PM

After following this article download Hitman Pro and scan your computer and flash drive.
Reply

80.

Chokri tunisien says

October 25, 2016 at 9:06 PM
IT s very simple
make to your Removable Drive one archive in the desktop
then format your Removable Drive
Then extract the archive in your Removable Drive.
And it s OK.
Reply

Chokri tunisien says

o
October 25, 2016 at 9:08 PM
Archive using winrar
and the job is done.
it s the only solution
Reply

Leave a Reply
Your email address will not be published. Required fields are marked *
Comment

Name *

Email *
Website
Post Comment

Notify me of follow-up comments by email.

Notify me of new posts by email.

Previous Post: How to Download videos from Facebook

Next Post: Operation Could not be Completed (ERROR 0x00000709) How to Fix Printer Error

FOLLOW US ON SOCIAL MEDIA

Facebook 4.5K

Twitter 220

Youtube 21.7K

Google+ 27

RECEIVE NEW POST VIA EMAIL

Enter your email address to subscribe.
Email Address
Subscribe

SUBSCRIBE ON YOUTUBE
POPULAR POSTS

How to Remove Shortcut Virus from USB Flash Drive and Computer.

How to fix Windows 7 Not Genuine Error - Fix This copy of Windows is not genuine Problem

Google Chrome Won't Open at all - How to Fix Chrome Load Error

How to Create a Fake Prank Virus Awesome and Harmless

Couldn't load XPCOM - How to fix Mozilla Firefox Error

RECENT POSTS

10 Best Hidden Features of Windows 10

9Apps Review Another Big App Marketplace with Extra Benefits

How to Install Windows 10 From USB Flash Drive & DVD

Facebook has Updated Their Algorithm to Reduce Clickbaits in News Feed

10 Must Have Extensions in The Edge Browser of Windows 10

Shop Related Products

Samsung 32GB BAR USB 3.0 Flash Drive (MUF-32B

$10.50$10.99

(1321)

SanDisk Cruzer CZ36 64GB USB 2.0 Flash Drive, Frus

$17.38$33.99

(14247)

SanDisk Cruzer CZ36 32GB USB 2.0 Flash Drive, Frus

$9.99$23.99

(14247)

SanDisk Ultra Fit 128GB USB 3.0 Flash Drive (

$29.59$39.99

(2689)
Go

Copyright 2015 iTechFever All Rights Reserved

Cloudways
Focus Retriever

Do you want to get your tech issue fixed?

Notifications can be turned off anytime from browser settings.

No WayYes

How to move pagefile.sys

Ads by Amazon

Sitemap | Privacy Policy | Contact | Powered By

Step One
Open Control Panel.
Content continues below

Software Changes the Face of Inventory Management

CIO

The Most Addictive Game Of The Year! Build Your City!

Elvenar

After Loosing 200LBS Chumlee Actually Looks Gorgeous!

Detonate.com
Ads by Revcontent

Step Two
Search for 'advanced
ADVERTISEMENT

system settings' and select it from the list.

Step Three
Click Settings within the Performance section and choose the advanced tab.

Step Four
Click the Change button under Virtual memory.

Step Five
If you deselect 'automatically manage paging file size of each drive' you can set C: to 'No
paging file' and choose another drive for 'System managed file'.

How to resize pagefile.sys

If you only have one hard drive or don't want to move the pagefile.sys there in another
option. Although the size of the file will match your RAM, you can make is smaller to free up
some space. Follow steps 1-4 above then do the following.
Step Five
Deselect 'automatically manage paging file size of each drive'.
Step Six
Select the custom size option and choose how big you want the file to be.

Tags:

Windows

Advanced startup options (including

safe mode)

Email

Print
The Advanced Boot Options screen lets you start Windows in advanced troubleshooting modes. You
can access the menu by turning on your computer and pressing the F8 key before Windows starts.
Some options, such as safe mode, start Windows in a limited state, where only the bare essentials
are started. If a problem doesn't reappear when you start in safe mode, you can eliminate the
default settings and basic device drivers and services as possible causes. Other options start
Windows with advanced features intended for use by system administrators and IT professionals.
For more information, go to the Microsoft website for IT professionals.

Repair Your Computer

Shows a list of system recovery tools you can use to repair startup problems, run diagnostics, or
restore your system. This option is available only if the tools are installed on your computer's hard
disk. If you have a Windows installation disc, the system recovery tools are located on that disc.

Safe Mode
Starts Windows with a minimal set of drivers and services.

To start in safe mode:

1.

2.

Remove all floppy disks, CDs, and DVDs from your computer, and then restart your
computer. Click the Start button , click the arrow next to theShut Down button (or the arrow next to
the Lock button), and then click Restart.
Do one of the following:

If your computer has a single operating system installed, press and hold
the F8 key as your computer restarts. You need to press F8 before the Windows logo appears. If the
Windows logo appears, you'll need to try again by waiting until the Windows logon prompt appears,
and then shutting down and restarting your computer.

If your computer has more than one operating system, use the arrow keys
to highlight the operating system you want to start in safe mode, and then press F8.

3.

On the Advanced Boot Options screen, use the arrow keys to highlight the safe mode
option you want, and then press Enter.

4.

Log on to your computer with a user account that has administrator rights.

Safe Mode with Networking. Starts Windows in safe mode and includes the network
drivers and services needed to access the Internet or other computers on your network.

Safe Mode with Command Prompt. Starts Windows in safe mode with a command
prompt window instead of the usual Windows interface. This option is intended for IT professionals and
administrators.

Enable Boot Logging. Creates a file, ntbtlog.txt, that lists all the drivers that are installed
during startup and that might be useful for advanced troubleshooting.

Enable low-resolution video (640480). Starts Windows using your current video
driver and using low resolution and refresh rate settings. You can use this mode to reset your display
settings. For more information, see Change your screen resolution.

Last Known Good Configuration (advanced). Starts Windows with the last registry and
driver configuration that worked successfully.

Directory Services Restore Mode. Starts Windows domain controller running Active
Directory so that the directory service can be restored. This option is intended for IT professionals and
administrators.

Debugging Mode. Starts Windows in an advanced troubleshooting mode intended for IT

professionals and system administrators.

Disable automatic restart on system failure. Prevents Windows from automatically

restarting if an error causes Windows to fail. Choose this option only if Windows is stuck in a loop
where Windows fails, attempts to restart, and fails again repeatedly.

Disable Driver Signature Enforcement. Allows drivers containing improper signatures

to be installed.

Start Windows Normally. Starts Windows in its normal mode.

Home

Desa Siberuk
Sejarah Desa
Profil Siberuk
Galeri Foto

Berita

Pertanian

Blog lain
Inggris anak
MTs Walisongo
MTs Darul Hikmah
Bahasa Inggris SMP/MTs

Computer

Blogging SEO

Puisi

Home

Home Computer CARA AMPUH MENGATASI VIRUS SHORTCUT(TERBUKTI) TANPA ANTIVIRUS TERBARU TERBAIK

CARA AMPUH MENGATASI VIRUS SHORTCUT(TERBUKTI)

TANPA ANTIVIRUS TERBARU TERBAIK
Mustofa Muhammad
20 Comments
Computer
Kamis, 30 Agustus 2012

Suatu ketika penulis stress banget karena di netbook penulis terinfeksi virus copy shortcut(ramnit, sality).
Berawal dari flasdisk yang tertular virus ini kemudian virus ini menyebar melaui flasdisk

ke netbook.

Menjengkelkan memang karena virus ini tidak mau dihapus. Penulis sudah berusaha menghapus sumber virus

di flasdisk dan virus duplikat di sistem. Sudah penulis coba hapus di dua tempat akan tetapi tetap saja tidak
berhasil.

Ketika

menghapus

di

tempat

satu

maka

di

tempat

lain

menginfeksi

lagi.

Virus Copy Shortcut

Virus copy shortcut ini terdiri dari folder Recycler, dan empat file copy shorcut 1 sampai 4, ditambah
autorun.inf. Ketika kita menghapus virus ini maka virus induk akan memberi perintah(command) untuk
menggandakan diri lagi. Penulis sudah mengetahui lokasi penyebab virus ini tidak dapat dihapus. Dengan
bantuan MS config penulis dapat mendeteksi file yang membuat virus copy shortcut tetap eksis. Baik untuk
lebih jelasnya ikuti langkah-langkah berikut ketika komputer/flasdisk anda terinfeksivirus ini:

1. Buka MS config di kotak run windows

2. Klik tab start up. Di startup windows akan terlihat file yang dapat membangkitkanvirus copy shortcut ini tetap
eksis dan tidak dapat dihapus.

3. Coba anda hilangkan centang file virus tersebut dan klik apply maka centang tadi tidak hilang dan tetap
tercentang. Virus tidak dapat anda hentikan.

4. Silahkan anda catat di kertas lokasi virus tersebut. Pengalaman penulis pembangkit virus copy shorcut berada
diC:\Users\User\AppData\Roaming\Microsoft\Windows\StartMenu\Programs\StartUp\filepembangkit
virus.exe

5. Menghapus virus dengan cmd pada windows normal tidak akan berhasil karena ketika kita menghapus file virus
di flasdisk dengan cmd sekalipun virus akan tetap muncul karena pembangkit virus di lokasi sistem akan
memberi command untuk membuat virus itu lagi. Cara yang paling ampuh dan efektif adalah dengan mode
safe mode with command prompt(cmd).

6. Silahkan anda restart computer anda dan masuk ke safe mode with command prompt dengan menekan F8.
Highlight atau pilih windows dengan mode safe mode with command pormpt.

7. Setelah anda berada di safe mode with command prompt silahkan anda copy paste atau ketikkan file yang
membuat virus copy shortcut selalu dapat mengaktifkan dirinya di lokasi tadi yang sudah anda catat tau di
copas(C:\Users\User\AppData\Roaming\Microsoft\Windows\StartMenu\Programs\StartUp\filepembangkit
virus.exe)

8. Hapus virus tersebut dengan perintah del nama virus.exe (catatan : anda harus masuk ke dalam folder tersebut
sampai anda dibawa ke lokasi file tersebut baru anda dapat menghapus file virus tersebut.)

9. Setelah anda menghapus file pembangkit virus copy shortcut tersebut kini saatnya anda menghapus virus copy
shortcut tersebut. Sebelumnya gunakan perintah attrib r s h /s /d untuk memunculkan virus-virus yang
mungkin masih tersembunyi selanjutnya silahkan anda gunakan perintah del nama virus shorcut 1, 2, 3, dan
4. Kemudian dilanjutkan menghapus folder Recycler dengan menggunakan perintah RD Recycler /s tekan enter
atau juga bisa dengan RMDIR Recycler /s. Untuk mengantisipasi silahkan hapus juga file autorun.inf kalau ada.

10.

Selesai anda sekarang sudah membersihkan virus dengan sempurna. Silahkan restart komputer anda ke
windows mode normal. Semoga bermanfaat.

Pernah terinfeksi virus shortcut seperti ini ? bisa jadi Flash disk dan komputer yang anda gunakan sudah terinfeksi oleh virus
bundpil, virus ini lah yang paling banyak menyebar di indonesia, bahkan sampai di luar negeri juga banyak yang terinfeksi oleh
virus ini.

Karateristik Virus

Ektensi : Acak
Ukuran : Acak (Sekitaran 20MB)
Tipe : Worm
Compiler : C++
Virus ini memiliki ukuran yang berbeda-beda, untuk file induk yang digunakan untuk menyebar di Flashdisk ukuran filenya
sekitaran 20-30MB dengan tipe file Dinamic Link Library (Dll), dan untuk file induknya yang ada disistem berukuran acak dari
puluhan MB hingga Ratusan MB dengan tipe file EXE. Virus mengacak ukuran filenya untuk mengecoh scanning antivirus yang
membatasi scaaning dari file-file berukuran besar, dengan begitu virus bisa lolos dari scanning antivirus.

File Induk
Saat menginfeksi sistem virus akan membuat file induknya di lokasi :

C:\ProgramData\msoamjlps.exe

Lokasi tersebut bisa berbeda-beda tergantung dari jenis variant virus

File induk ini akan dijadikan proses utama virus dalam menginfeksi sistem, virus juga membuat startupnya di registry,
tujuannya agar virus induk dapat berjalan secara otomatis :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run 1114256606
C:\ProgramData\msoamjlps.exe

Proses Siluman
Virus ini mempunyai kemampuan untuk menyamarkan prosesnya agar tidak mudah dilihat oleh korbannya, virus
memanfaatkan teknik RunPE, yakni sebuah teknik yang menggunakan proses lain sebagai proses virus, virus memanfaatkan

proses msiexec.exe sebagai proses induknya untuk melakukan penyebaran, dengan begitu korban tidak akan mencurigai klo
proses itu adalah proses virus

Jika kita lihat pada gambar diatas dimana proses msiexec.exe terlihat seperti proses sistem biasa, padahal jika diteliti lebih
jauh sebenarnya proses itu sudah di injek dengan kode-kode virus (Teknik RunPE) sehingga proses msiexec.exe berubah
menjadi proses virus, hal ini dapat dengan mudah diketahui dengan program seperti Process Explorer dari File Handle yang
ada pada proses msiexec,exe, disitu terlihat salah satu file handle nya tertuju pada lokasi file induk virus.
Teknik seperti ini tidak sembarang virus bisa menggunakannya, hanya virus-virus canggih yang biasa menggunakan teknik
penyamaran seperti itu.

Target Penyebaran
Target penyebaran virus ini tertuju pada Removable Drive, seperti flash disk, memory card dan lain-lain, apabila virus
menemukan Flash disk yang terpasang dikomputer, virus akan membuat sebuah folder baru dengan nama kosong/blank, dan
kemudian virus akan memindahkan semua data file/folder yang ada diflash disk, ke lokasi folder baru yang dibuat oleh virus,
dan terakhir virus akan membuat sebuah shortcut virus, yang berisi perintah-petintah untuk menjalankan file induk virus yang
ada di dalam flash disk
Berikut ini contoh isi flash disk sebelum terinfeksi oleh virus bundpil

dan gambar dibawah ini adalah tampilah isi dari flash disk yang sudah terinfeksi

bisa kita lihat pada gambar diatas semua file dan folder sudah dipindahkan oleh virus ke dalam folder dengan nama
kosong/blank. virus juga menyertakan sebuah shortcut yang digunakan untuk membuka isi folder tersebut, dimana semua
file/folder yang disembunyikan ada didalam folder tersebut.

contoh saat korban mengklik/membuka shortcut tersebut, semua data file yang sudah disembunyikan akan ditampilkan,
sehingga korban mengira bahwa semua normal-normal saja, padahal dibalik itu, proses virus lah yang akan aktif lebih dulu,
baru kemudian virus menampilkan isi folder yang berisi data file asli yang telah disembunyikan.

Bagi yang belum punya program ini bisa download Autoruns.zip (576 KB), yang bisa dianggap program wajib bagi
saya.
Cara berikut mungkin hanya salah satu dari berbagai metode yang ada dan yang biasa saya gunakan. Secara garis
besar, saya membagi cara mematikan sumber virus secara manual tanpa antivirus ini kedalam dua langkah, yaitu :
Mendeteksi sumber virus atau file yang mencurigakan (dianggap virus) dan Cara Mematikannya.

Langkah Pertama, Mendeteksi Virus

Sebagian besar komputer yang terinfeksi, bisa diketahui sumber virus yang aktif di komputer dengan program seperti
Autoruns. Jalankan program autoruns.exe. Jika program tidak berjalan, coba rename file autoruns.exe dengan nama
lainnya. Jika tetap gagal, bisa menggunakan program sejenis lainnya.
Setelah Autoruns dibuka, bagian yang terpenting disini dan akan digunakan adalah tab Logon, karena disinilah
ditampilkan berbagai program (aplikasi) yang berjalan otomatis ketika kita menjalankan windows.

Adanya tanya cek menunjukkan bahwa program tersebut aktif dan otomatis dijalankan ketika Start Up Windows
(Windows dijalankan). Jika tidak ada tanda cek, menunjukkan bahwa program tersebut sebenarnya ada dalam daftar
start up, tetapi tidak otomatis berjalan ketika Start Up Windows.
Program Windows yang HARUS AKTIF
Ada beberapa program penting Windows di daftar Autorun yang harus aktif, jangan sampai tanda cek-nya dihilangkan
atau bahkan dihapus. Biasanya letaknya ada di bagian paling atas, yaitu :

Alasan kenapa program tersebut jangan dihapus (perlu diaktifkan), bisa dibaca artikel Tips mendeteksi keberadaan
Virus. Untuk memastikannya, yang perlu diperhatikan adalah Autorun Entry dan Image Path, terkadang virus
menyerupakan dengan nama tersebut. Image Path adalah lokasi file-nya, jika namanya seperti diatas, tetapi lokasinya
di folder lain, maka perlu di waspadai.
Mencari Sumber Virus
Berikut beberapa point yang bisa dilakukan untuk mencari sumber virus atau file mencurigakan yang dianggap sebagai
virus :
1.

Periksa akan adanya Autorun Entry (daftar program) yang kita merasa tidak pernah menginstallnya. Misalnya
saya pernah melihat ada yang namanya ffdshow.exe dengan lokasi (Image Path) C:Program FilesK-Lite Codec
Pack, padahal di komputer tersebut tidak pernah di install program K-Lite Codec Pack. Maka kemungkinan itu salah
satu sumber virus. Hal ini sering terjadi, misalnya ada aplikasi dengan folder Corel Draw, tetapi kita tidak pernah
menginstall Corel Draw.

2.

Hilangkan tanda cek dari Autorun Entry yang mencurigakan, kemudian klik icon Refresh (F5). Jika tanda cek
tersebut kembali aktif atau muncul daftar entry baru yang sama dan disertai tanda cek, kemungkinan itu adalah
sumber virus. Cara ini terkadang harus ditunggu beberapa saat, atau aplikasi Autoruns di tutup dulu, kemudian
setelah beberapa lama dibuka lagi untuk memeriksanya.

3.

Dari daftar Program Windows yang HARUS AKTIF sebelumnya, periksa akan adanya program lainnya di
ketiga tempat yang saya beri garis merah. Pada Windows XP, seharusnya hanya ada 3 file diatas, yaitu rdpclip,
userinit.exe dan explorer.exe dengan lokasi persis seperti Image Path diatas. Adanya tambahan lainnya
menunjukkan kemungkinan sumber virus. Cek dengan point ke-2

4.

Sumber virus biasanya tidak hanya satu, sehingga perlu dicari daftar Autorun lainnya yang mencurigakan,
baik dengan cara seperti point 1 atau 2. Misalnya di lokasi :
o

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

C:Documents and SettingsAll UsersStart MenuProgramsStartup

HKCUSoftwareMicrosoftWindowsCurrentVersionRun

Dan lainnya, yang berada di bawah dari daftar Program Windows yang HARUS AKTIF di atas.

Setelah diperoleh daftar-daftar file yang mencurigakan atau tidak dikenal, tulis nama dan lokasi filenya yang bisa dilihat
dari keterangan Image Path (program Autoruns) di kertas atau file text (misalnya dengan Notepad). Bagi yang belum
terbiasa mungkin dafarnya akan banyak sekali. Tetapi hal ini tidak masalah
Menghapus daftar dari Autoruns tersebut hanya menghapus referensinya saja, jadi filenya (lokasinya disebutkan di
bagian Image Path) tidak akan terhapus
Mematikan Sumber Virus
Setelah didapat daftar file-file yang mencurigakan, langkah selanjutnya adalah me-rename ekstensi file tersebut (jangan
dihapus terlebih dahulu). Me-rename dari windows biasanya tidak akan berhasil, atau kadang kita tidak tahu ekstensi
file tersebut dan tidak bisa ditampilkan

Cara yang biasanya selalu berhasil adalah melalui media lain. Misalnya menjalankan sistem Operasi langsung dari
CD,DVD, atau Flashdisk. Misalnya CD Linux, CD Windows MiniPE, UBCD4Win dan lainnya. Atau bisa juga kita
melepas Hardisk kita dan dipasang di komputer lainnya (yang bebeas virus) sebagai Hardisk kedua (secondary). Intinya
agar kita bisa mengakses (membuka) file dan folder dari daftar yang kita tulis tanpa mengaktifkan Windows yang ada di
hardisk, sehingga virus tidak bisa aktif.
Setelah kita bisa booting komputer dari media lain atau memasang hardisk di komputer lainnya, selanjutnya kita
mencari file-file dari daftar yang telah kita buat. Sebelumnya aktifkan opsi untuk menampilkan semua ekstensi file jika
belum kelihatan. Setelah itu, rename semua ekstensi file yang kita dapatkan.
Misalnya nama_file.exe menjadi nama_file.exe.vir, viruz.dll menjadi viruz.dll.vir.
Setelah selesai semua, saatnya dicoba komputer tersebut ( kembali mengaktifkan windows). Periksa lagi dengan
program Autoruns. Jika daftar yang kita tulis kembali muncul dan disertai tanda cek, atau masih muncul tanda-tanda
komputer terinfeksi virus, mungkin ada beberapa program lain yang terlewatkan. Kadang kita harus mencoba beberapa
kali. Jika komputer tidak berjalan, kemungkinan ada dafar file yang salah yang kita sertakan. Coba rename kembali file
tersebut ke asalnya (hilangkan ekstensi *.vir)
Setelah berhasil dan tidak ada tanda-tanda virus berjalan, perlu diingat bahwa kita hanya mematikan sumber-sumber
virus dan kemungkinan masih banyak virus di komputer. Langkah selanjutnya bisa dilakukan dengan melakukan scan
dengan antivirus + update terbaru untuk mencari virus-virus yang masih ada di komputer. Dan ini mungkin harus
menunggu sampai antivirus mampu mendeteksi virus tersebut.
Cara diatas biasa saya gunakan ketika antivirus tidak mampu mendeteksi adanya virus dan biasanya berhasil. Dan
pengalaman juga ikut membantu keberhasilan menemukan sumber virus ini. Jika masih bingung atau belum yakin dari
daftar autorun yang ada, silahkan di tuliskan dalam komentar, sehingga kita bisa saling membantu dan melengkapi.