What is Shortcut Virus? How to remove it?

What is Shortcut Virus? How to remove it?


Virus Shortcut is a virus that combines Trojan / worm, hiding all files and directories of the user, then replacing these files and folders with similar shortcuts. To find out more, what is Shortcut Virus? How to remove it? Readers refer to the article below of Taimienphi.vn.


When running one of the shortcut The shortcut virus creates, which means that you are running malware, which is a copy of the virus and it will infect your system. Once infiltrated, the virus steals users’ personal data, reduces system performance and causes all other side effects associated with malware.

What is Shortcut Virus? How to remove it?

Virus Shortcut penetrate the system primarily through devices that store and transfer data files such as USB drives, external hard drives and SD memory cards, or can access the system through Autorun or Autoplay on Windows.

Many shortcut viruses are not detected by antivirus software, so running antivirus software is not enough. Fortunately, the removal of this virus is relatively simple, not very complicated. Through the article learn what is Shortcut virus? How to remove it? will help you have more knowledge about this virus and how to deal with it.

Remove shortcut virus from external devices

If your USB drive, external hard drive, or SD card is infected with a shortcut virus, it can spread to the devices and computers you plugged in. Here’s how to remove shortcut virus from external devices:

Step 1: Plug in an external device infected with the shortcut virus to the Windows computer.
Step 2: Open File Explorer (click Windows + E) and find the item Devices and drives to find an external device and note the drive letter.
Step 3: Open Command Prompt under Admin by pressing Windows + X To open the Power User Menu, then select Command Prompt (Admin).
Step 4: In the Command Prompt window, type the external drive letter that you noted in the previous step, and then press Enter, for example, if it is drive E, enter:

E:

Step 5: Delete all shortcuts on the device with the following command:

del * .lnk

Step 6: Restore all files and folders on your device with the command:

attrib -s -r -h / s / d *. *

Comeinand attrib Used to change the properties of a specific file or directory. Other parts of the command specify which files and directories to change and how the files and directories are changed:

-S: remove the “system file” status from all matching files and directories.
-r: Remove read-only status from all relevant files and directories.
-H: Eliminate the “hidden” state from all matching files and directories.
/S to apply recursive commands to all files and folders in the creation folder and all subfolders on the device.
/ d to apply commands to directories (normally attrib handle only on files).
*. * means all file and directory names match.

After executing the commands, you may consider copying all files and archives to an external hard drive.

What is the shortcut virus?

Remove shortcut virus permanently from computer

Step 1: Open Task Manager (press Ctrl + Shift + Esc).
Step 2: In Process tab, find and right-click wscript.exe or wscript.vbs, choose End Task. If you see both processes, follow the same steps for each process.
Step 3: Close Task Manager.
Step 4: Open the Start Menu, enter regedit Click the Search box to open Registry Editor.
Step 5: In the Registry Editor window, navigate to the following key:

HKEY_CURRENT_USER / Software / Microsoft / Windows / CurrentVersion / Run

Step 6: In the right pane, find keys with strange names, such as odwcamszas, WXCKYz, OUzzckky, …. Then search the web for information about these shortcut viruses.
Step 7: Right-click each key, select Delete.

Remember to search the internet for details of what the key is before deleting it, to avoid accidentally deleting important keys that could lead to serious problems with Windows.

Step 8: Close the Registry Editor window.
Step 9: Open a Run command window (click Windows + R) and enter msconfig Click on it and click OK, got it to open the System Configuration window.
Step 10: In Startup tab, find strange programs with extensions .exe or .vbs, select each program one by one, select Disable.
Step 11: Close the System Configuration window.
Step 12: Open a command window Run (press Windows + R), then type % TEMP% Click on it and click OK, got it or press Enter to open the Windows Temp folder. Delete all files and folders here.
Step 13: In the File Explorer window, navigate to the following path:

C: Users [username] AppData Roaming Microsoft Windows Start Menu Programs Startup

Step 14: Find files .EXE or .VBS and delete these files.

If the above method does not work, you can try to use USBFix Free. Technically, this software supports cleaning of USB drives and other peripherals, but you can use it to remove malware (malware) on the system drive. USBFix Free works as a virus removal tool. However, it should be noted, back up your data first to ensure no data loss.

Download USBFix Free to your device and install it here: Download USBFix Free

Note: If the drive or partition infected with the shortcut virus is a system drive (usually the C: drive), there is no easy way to clean up the broken shortcuts. On Windows 8.1 and Windows 10 you can use the options reset or refresh system. On Windows 7, the only way is to reinstall Windows.

Some tips to avoid malware

Refer to the article 7 ways to protect your computer from malware of Taimienphi.vn for some more solutions to prevent software from attacking your system. Keep your device safe from potential internet threats.

If other malware is detected, refer to the article spyware removalManual ad, spyware, adware to quickly remove malware from your system.

https://thuthuat.taimienphi.vn/virus-shortcut-la-gi-lam-the-nao-de-loai-bo-no-30527n.aspx
The article on Taimienphi.vn has just explained to you what is shortcut virus? How to remove it? Hope the above article will be helpful to you. Remember to share your ideas with Taimienphi.vn offline.

.

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *