How to Remove Shortcut Virus from PC/Laptop in Windows 10/8/7 (Free)

Tracy King updated on Jan 21, 2021 to File Recovery | How-to Articles

How to remove shortcut virus on Windows 10, 8, or 7? There are three reliable methods to remove shortcut virus from PCs. You can easily remove shortcut virus with shortcut virus remover. The shortcut virus removal methods can sometimes cause data loss. It is recommended to use data recovery software after the infection is successfully removed.

3 Ways on How to Remove Shortcut Virus in Windows 10/8/7

The shortcut virus is a shared computer virus that hides your files and replaces them with shortcuts with the same file name. When you click on the shortcuts, the virus replicates itself and further infects your drive.  When your computer, hard drive partition, or USB drive gets affected by the shortcut virus, all files become shortcuts, and the actual data is inaccessible. The shortcut virus usually enters your drive via running a .exe file that contained the virus or from using a flash drive on multiple computers.

To remove shortcut virus in Windows 10/8/7 PC or USB:

  1. 1. Remove Shortcut Virus with CMD
  2. 2. Remove Shortcut Virus from the Registry
  3. 3. Remove Shortcut Virus with Antivirus Software

If you have shortcut virus infection problems, read the detailed solutions below to get rid of the virus with or without shortcut virus remover

Method 1. Clean Up and Remove Shortcut Virus with CMD [Free]

Applies to external and internal devices

If your external devices like USB flash drive, external hard drive, or SD memory card is infected with a shortcut virus, you must remove the virus immediately. The infection spreads whenever you plug the external device into a Windows PC or laptop. Follow the steps below to remove shortcut virus with Command Prompt.

Be careful while using the CMD command line to resolve your issue. Improper use of CMD can result in severe damage to your system.

Step 1. Connect your external hard drive to PC and right-click on "Start", select "Search".

Step 2. Type Command Prompt in the Search box and click "Command Prompt" to bring it up. Sign in with your administrator account and password if the system asks.

Step 3. Type H: and hit "Enter". Replace H: with the drive letter of your USB, pen drive, or HDD.

Step 4. Type del *.lnk and hit "Enter".

Step 5. Type attrib -s - r -h *.* /s /d /l and hit "Enter".

remove shortcut virus using cmd command

If this didn't work, you are likely infected by another virus. Replace the .lnk with another virus extension such as *.exe to delete these suspicious viruses.

Command Meaning
-s removes the "system file" status from all matching files and folders.
-r removes the "read-only" status from all matching files and folders.
-h removes the "hidden" status from all matching files and folders.
/s makes the command recursively apply to all files and folders in the current directory and all subdirectories, basically the entire device in this case.
/d makes the command apply to folders as well (typically attrib only handles on files).
*.* means all file names and folder names should be considered a match.

Method 2. Delete/Wipe/Remove Shortcut Virus from the Registry

Applies to computers and laptops

This method aims to delete suspicious keys that may be related to the shortcut virus on your PC. 

Deleting wrong keys in the Registry Editor may cause serious results, including malfunction issues in programs or part of computer features. Be careful if you are going to remove keys.

Steps to remove shortcut virus from Registry:

Step 1. Press Windows + R keys, type: regedit, and hit "Enter".

Step 2. Open "Registry Editor" and go to "HKEY_CURRENT_USER > Software > Microsoft > Windows > CurrentVersion > Run".

Step 3. Find the suspicious keys like odwcamszas, WXXKYz, ZGFYszaas, OUzzckky, and delete them.

remove shortcut virus from registry

Method 3. Run Shortcut Virus Remover or Antivirus Software

Although antivirus software can often miss shortcut virus files, it can serve as a double-guarantee that your PC is rid of the virus. Download and install anti-virus software to scan and clean up all detected virus files from your Windows 10/8/7 PC or USB. Below is a list of recommended antivirus software tools to choose from. Some will be more effective than others for your particular hardware setup so that you may try more than one. 

Steps to remove shortcut virus with free Antivirus Software:

Here I take Norton Power Eraser as an example:

Step 1. Download and run Norton Power Eraser.

If a new version is available, Norton Power Eraser will check and download it.

Step 2. In the "Norton Power Eraser" window, click the "Scan for Risks" icon.

use antivirus to remove shortcut virus

By default, Norton Power Eraser will perform a rootkit scan and ask you to restart the system. When you see the prompt to restart the computer, click "Restart".

If you do not want to include rootkit scanning, please go to "Settings" and uncheck the "Include rootkit scanning" option.

Step 3. Depending on your situation, take one of the following steps:

  • If you see "No risk found", Norton Power Eraser has not detected any risk on your computer, click "OK" to end.
  • If you see any files listed as "bad", the "Remove" checkbox under "Action" will be automatically checked. It is recommended that you remove these files. If the "Repair" checkbox under "Action" is checked, these files will be repaired after restarting.
  • If you see any files listed as "Unknown", click the cloud icon that appears next to these files. It will send the file to a Symantec server and scan it using a traditional signature detection engine.

Step 4. After successfully removing the risk, click "Finish".

Bonus Tip - How to Recover Files After Removing Shortcut Virus 

After removing the shortcut virus from your USB and Windows PC, you should browse your data to see if anything important was lost in the process. It can be difficult and eye-straining to scour your entire hard drive for files that may have been lost. To speed up the process of finding lost files, and to quickly recover them, use EaseUS Data Recovery Wizard to search your drive. EaseUS free data recovery software scans deep into the data content of your disk to find all data lost from deletion, formatting, or virus attacks. Besides, it also supports data recovery from lost partition, RAW partition, damaged hard drive, and so on. 

Your Reliable Choice - EaseUS Data Recovery Wizard

  • Recover deleted, formatted, and inaccessible data in different data loss situations.
  • Recover photos, audio, music, and emails from any storage effectively, safely, and completely.
  • Recover data from an SD card, hard drive, memory card, flash drive, digital camera, and camcorder.

Read on to see just how straightforward data recovery can be:

Step 1. Launch EaseUS Data Recovery Wizard. Select the disk partition or storage device where you lost files and click the "Scan" button.

select a location and click scan

Step 2. This program will quickly start a scanning process to find lost files. When the process accomplishes, you can double-click files to have a preview before selection.

scan deleted files

Step 3. Choose the files you want. Then click the "Recover" button to get them back. You should save the data to another safe spot in your PC/storage device, not where they lost.

Restore lost data from drive which was infected by virus

After restoring the data, to make sure that you are done with the shortcut virus, you can back up data before formatting then reformat the drive. Then restore the data from your backup, and your computer will be safe and good-as-new. 

Prevent from Shortcut Virus by Turning on Windows Firewall

It takes much effort to remove shortcut virus, why not protect your computer or laptop in advance. The easiest way to prevent your Windows PC is by turning on Windows Defender Firewall. Follow the steps to protect your computer:

Step 1. Open "Control Panel" > click "Windows Defender Firewall" > select "Turn Windows Defender Firewall on or off".

Step 2. Check the boxes of "Turn on Windows Defender Firewall"  and click "OK" to confirm.

turn on firewall to prevent shortcut virus


Whenever you want to remove the shortcut virus, you can try any one of the solutions above to get help. After shortcuts removing, turn on Windows Firewall to protect your computer. If you have data loss problems, EaseUS hard drive recovery software can always do you a favor.

How to Remove Shortcut Virus FAQs

There are some frequently asked questions about removing the shortcut virus. Read on if you still have questions.

How can I remove the shortcut virus from my USB?

To remove shortcut virus from pen drive/USB drive:

Step 1. Connect your external hard drive to PC and right-click on "Start", select "Search".

Step 2. Type: Command Prompt in the Search box and click "Command Prompt" to bring it up.

Sign in with your administrator account and password if the system asks.

Step 3. Type: E: and hit "Enter". (Replace E: with the drive letter of your USB, pen drive.)

Step 4. Type: del *.lnk or del autorun.inf and hit Enter.

Step 5. Type: attrib -h - r -s  /s /d E:\*.* and hit Enter. (Replace E: with the drive letter of your infected device).

How do I delete a shortcut file?

To delete the shortcut

Step 1. Right-click the icon and select "Delete." 

Step 2. Click "Yes" to confirm the deletion. 

Which is the best antivirus to remove shortcut virus?

Here are some great antivirus tools:

  • Trojan Removal Tool
  • Shortcut virus fixfolder
  • Malwarebytes Anti-Malware, etc.

Was This Page Helpful?


Frequently Asked Questions

1. Why choose EaseUS Data Recovery Wizard?

"EaseUS Data Recovery Wizard is the best we've seen. It's far from perfect, partly because today's advanced disk technology makes data-recovery more difficult than it was with the simpler technology of the past, but it's fast and efficient..."PCMag

"The first thing you'll notice about EaseUS Data Recovery Wizard Pro is that its interface is very clear and uncluttered, with only a small collection of self-explanatory controls. You won't find lots of extra options hidden in a system of hidden menus, either; what you see really is what you get."techradar

"Recover lost files, even after deleting a partition or formatting your drive."Macworld

2. Why cannot I recover 2GB data for free?

It is recommended to check the version installed is Free or Trial because they are different versions.

Trial has data preview function but cannot save any files, while the Free version enables to recover 2 GB files. The default free space is 500 MB and you may share the product on social media to get another 1.5 GB.

3. Why cannot the recovered files be opened?

A file is saved as 2 parts on the storage device: directory info (which is comprised by file name, time stamp and size info, etc.) and data content.

If the files with original file names and folder structures cannot be opened, one possible reason is the corrupted directory info. There is still a chance to recover the data content with the RAW Recovery method in our software.

4. Why isn't it suggested to recover the files back to the original drive?

The storage structure of the lost files would be altered or damaged by any changes on the drive. If you save the recovered files back to the same drive, the original data structures and data content would be corrupted or overwritten, which causes permanent data loss. So you should prepare another disk to save the files.

5. How can I check whether my data is recoverable or not before purchase?

The Free version helps you save 2GB files, so verify the recovery quality of our product before purchase.

6. How long does it take to scan the drive?

It strongly depends on the capacity of your hard drive and the performance of your computer. As reference,most drive recoveries can be completed in around 10 to 12 hours for a 1-TB healthy hard drive in general conditions.

About Data Recovery Wizard

It's super easy to recover 250+ types of files after deletion, disk formatting and virus infection. Click the links and compare the difference of each version.