Tuesday, 21 May 2013

How To Remove Shortcut Virus From Pen drive/Memory Card Simply Without Antivirus?

     Many of us had and having this problem. We have some most important data in our  pen drives,  what  will we  do  if all  the  data are loss?  At  some day, all  the  folders which are in
groldz.com-shortcuts
our drive is just showing as shortcuts in Windows (as shown in the above figure).
     This problem may cause not only in pen drives, also in memory sticks, phone memories, external hard disks etc. If we trying to open those folders Windows will show an error that “Shortcut missing…!” We afraid of losing our data and somebody format the drive. But no need to afraid for this and format. Yes, this is a type of virus affection. Just follow the simple steps to remove that shortcuts and retrieve your folders back.
NOTE:No need of any antivirus software to perform this operation.
  1. After plug in your virus affected drive, just press Win key + R to open Run box and type “cmd” and press Enter key. (Without double quotes)
  2. In the opened command prompt, open your drive by enter your drive letter as shown in the below figure. For example, if your drive letter is enter g: and press Enter. (To find your drive letter just open “My Computer” and check your drive icon)
  3. Now type “del *.lnk” and hit Enter.(without double quotes)
  4. Finally type the below command and hit Enter. (without double quotes)
“attrib -s -r -h *.* /s /d /l”
groldz.com-shortcut virus removal
         That’s it, just wait some seconds. Then open and check your drive. Your folders will be retrieved. I hope this is useful for you. If any doubt, comment below. Share with your friends. Don’t forget to subscribe us freely…
NOTE: This will definitely recover all the folders, but it wont completely remove all the virus, better you scan the drive with an antivirus.
You may like this too…

    564 comments:

    1. Does this work on usb hard drive too?? Xx

      ReplyDelete
    2. Surely it will work in external USB hard disk drive. If any difficulties, comment here . . .

      ReplyDelete
      Replies
      1. its not working for me

        Delete
      2. it is working but the link has been deleted
        but i can't retrieve the folder it has been not showhing

        Delete
      3. Try, "show hidden files"

        Delete
      4. whoo.....thanks a lot...it will worth it...thanks

        Delete
      5. it says invalid switch, and i am nt able to view the files and folders

        Delete
      6. attrib -s -r -h *.* /s /d

        dont type "/l"

        Delete
      7. booom it works....as smooth infant's """ass""
        thnks buddy

        Delete
    3. deleted the link succesfuly but then it shows invalid switch - /l

      ReplyDelete
      Replies
      1. What? Explain it clearly. Still you have those short cuts problem or the folders are successfully recovered...?

        Delete
    4. The shortcuts keeps coming up every time I refresh

      ReplyDelete
      Replies
      1. I cant get u clearly frnd, please comment ur trouble briefly. Its my pleasure to recover the problem. Thank u . . .

        Delete
      2. i have also same problem this method works but after refresh it shows shortcut format

        Delete
      3. The above method will retrieve the files from the drive which r changed as shortcuts. It will not clear all the viruses permanently. Just scan ur system with an updated Antivirus package to remove all the viruses permanently...

        Delete
    5. Hello friends, correct method is :

      First of all Click on Start >> Run >> and type cmd and click on OK.
      Here I assume your pen drive letter as G:

      Enter this command.

      attrib -h -r -s /s /d g:\*.*

      You can copy the above command >> Right click in the Command Prompt and
      paste it.

      Note : Don't forget to replace the letter g with your pen drive letter.
      Now press Enter


      Rajeev Sharma
      keshav3024@gmail.com

      ReplyDelete
      Replies
      1. thanks bro it worked with me too..

        Delete
      2. bro it is not working 4 me both method.. shortcuts are still there in my pen drive..

        Delete
      3. thanks man... I want to give a hug to you!

        Delete
      4. its not working Could not found I:\*.ink pls replay to my mail cjayanth08@gmail.com

        Delete
      5. it says access denied , can u help me with this ?

        Delete
    6. Thank u Rajeev, thank u for ur method. But, the method which I had given in the post is also correct. Let try that and comment ur difficulties . . .

      ReplyDelete
      Replies
      1. after i do the method, the shortcuts keep going back, when i scan it, it says "no threat found". how to fix it... so many songs in it :(

        Delete
    7. Thank u works perfectly when used together

      ReplyDelete
    8. this partially cleaned my pen drive... still .Trashes file s not cleaned.. could u suggest some other ways to clean it..

      ReplyDelete
      Replies
      1. U r welcomed here frnd... The above method will retrieve the files from the drive which r changed as shortcuts. It will not clear all the viruses permanently. Just scan ur system with an updated Antivirus package to remove all the viruses permanently. Or please explain ur problem clearly...

        Delete
      2. though it is showing autorun.inf and unable to delete this

        Delete
    9. i used both methods...the original one gave the answer parameter not corect -, and the other one worked

      ReplyDelete
      Replies
      1. Just try this command...
        attrib -s -r -h *.* /s /d /l
        Comment ur needs...

        Delete
    10. thanks it works rajive but mathi kp plz type ur method in comment box - ramesh p

      ReplyDelete
      Replies
      1. Just try this command...
        attrib -s -r -h *.* /s /d /l
        Comment ur needs...

        Delete
      2. bro this method is not removing shortcut from my pen drive.. pls help me....

        Delete
      3. Can u please explain ur pblm clearly? What is the error u got...?

        Delete
      4. hi... i have beeen done as per your instruction but still now the shortcut is not removed...plz help me

        Delete
      5. Frnd, if u done the above method correctly, it will surely retrieve all the files. Plz follow the steps given above carefully...
        As I have already told, this method wont destroy the viruses permanently. You should scan ur system with an updated antivirus package to delete all the viruses permanently...

        Delete
    11. H:\>attrib -s -r -h *.* /s /d /l
      Parameter format not correct -

      in my system show this - ramesh p

      ReplyDelete
      Replies
      1. Just try this command...
        attrib -s -r -h *.* /s /d /l
        Comment ur needs...

        Need to hack Windows 7? Go here...
        http://www.groldz.com/2013/06/how-to-easily-change-windows-7-password.html

        Delete
    12. Frnds, sorry for ur inconvenience. Just try this command...
      attrib -s -r -h *.* /s /d /l
      Comment ur needs...
      Its simple and use minus (-) symbol correctly for better results. Just comment ur problems. Its my pleasure to help u my frndz... :)

      ReplyDelete
    13. When i enter del *.lnk , it says 'cannot access file as its being used by another process' .
      Plese help.

      ReplyDelete
      Replies
      1. Welcome here Negi. And ur problem is becoz of some other programs of ur system may access those virus affected files. So terminate those programs using "unlocker" tool. Comments welcomed...

        Delete
    14. download unlocker 1.9.2 to delete undeletable file.

      ReplyDelete
    15. Replies
      1. U r welcome Mr.Srikanth. And dont forget to share this with ur frndz...
        Need to hide a hard disk partition without any software? Its simple, just go here...
        http://www.groldz.com/2013/06/how-to-hide-hard-disk-partition-without.html

        Delete
    16. To resolve shortcut virus please download Smadav 9.3 from
      http://smadav.web.id/download/
      All shortcut & hidden file in usb pendrive/flash drive will restore back to normal
      IT Service Desk Specialist
      -Nadzir

      ReplyDelete
    17. it partially deleted the shortcut virus,but when i connect the usb again,the shrt cut virus are still there..i would like to remove the virus from my laptop..when i used the same method as above for the hard drives,the dos prmont shows that access is denied !! pls help ..im fed up with this virus

      ReplyDelete
      Replies
      1. U r welcomed here frnd... The above method will retrieve the files from the drive which r changed as shortcuts. It will not clear all the viruses permanently. Just scan ur system with an updated Antivirus package to remove all the viruses permanently. Or please explain ur problem clearly...
        And the reason for the error "access denied" is because you might select some system files like "systemvolumeinformation" and "recycler". Just do the command without select those system files. And comment ur troubles. Its pleasure to help u...
        - See more at: http://www.groldz.com/2013/05/how-to-remove-shortcut-virus-from-pen.html#sthash.Au9NajW5.dpuf

        Delete
    18. it is not completely deleting........
      plzzzz tell me

      ReplyDelete
      Replies
      1. Frnd, Please explain ur problem clearly. In which step u r struggling...?

        Delete
    19. thanks a lot dear friend. it is working

      ReplyDelete
      Replies
      1. u r welcome frnd. Please dont forget to share this with ur frnds. More comments/ feed backs welcomed at groldzindia@gmail.com or mathi@groldz.com

        Delete
    20. Thanks it is Working for me also..But you said that it wont remove the virus completely.So i have to scan my hardrive rite?

      ReplyDelete
    21. Also more thing afte excuting the commands what ever you shared attrib -s -r -h *.* /s /d /l...
      $RECYCLE.BIN is created...i deleted that folder..Is it okay?

      ReplyDelete
      Replies
      1. Welcome chanduaddanki, u r rite, u have to scan ur system with an updated anti virus tool. And the file named RECYCLE.BIN is a system file. There is no pblm with that. Its OK...
        Want to hack Windows? Go here, http://www.groldz.com/2013/06/how-to-easily-change-windows-7-password.html

        Delete
    22. in my pendrive all pics and movies or pdf files are turned to shortcuts and after using ur suggestions it helps but for 2 seconds only then it re back to same....plz help me

      ReplyDelete
      Replies
      1. Welcome frnd, I think ur system had lot of virus. So, try the same method with any other system. Comment ur troubles...

        Delete
    23. Replies
      1. U r welcome Ashwani. Dont forget to share this with ur frndz...

        Delete
    24. Replies
      1. U r welcome Nasina. Dont forget to share this with ur frndz...

        Delete
    25. Can you please explain attrib -s -r -h *.* /s /d /l..every attrubute in the above command

      ReplyDelete
      Replies
      1. U r welcome chanduaddanki. I appreciate ur involvement. Here is the answer for ur question...
        Dont forget to share with ur frndz...
        - Clears an attribute.
        R Read-only file attribute.
        S System file attribute.
        H Hidden file attribute.

        /S Processes matching files in the current folder
        and all subfolders.
        /D Processes folders as well.
        /L Work on the attributes of the Symbolic Link versus the target of the Symbolic Link

        Delete
    26. check this http://www.techworm.in/2013/06/if-your-computers-infected-with.html

      ReplyDelete
    27. Thank you so much! x.

      ReplyDelete
    28. U r welcome guyz. Dont forget to share with ur frndz...

      ReplyDelete
    29. I'm getting .Trashes being used by another process..

      ReplyDelete
      Replies
      1. Mr.Stark, can u plz explain me ur pblm clearly...?

        Delete
    30. Replies
      1. U r welcome Dharshan, please share this with ur frndz...

        Delete
      2. yea... sure and its ma pleasure. U please answer me 1 question,that i heard u still pursuing your BE,how can u learn such kind of codes and tricks !! ?? How COME ???????

        Delete
      3. Ya, am pursuing my B.E now. Are u kidding? This is not that much of difficult code. This is a simple command. I hv practiced this type of tricks in my own experience...

        Delete
    31. BUT THIS IS NOT REMOVING THE VIRUS COMPLETELY. THE VIRUS COMES BACK YET AGAIN. HOW TO ADDRESS THAT. SEEMS LIKE IT STAYS SOMEWHERE IN THE HARD DISK AND COMES BACK AGAIN & AGAIN.

      ReplyDelete
      Replies
      1. Yes, as I have already told, this method wont destroy the viruses permanently. You should scan ur system with an updated antivirus package to delete all the viruses permanently...

        Delete
    32. I tried and tried,but the shortcut virus is still appearing on my flash disk. What shall I do?

      ReplyDelete
      Replies
      1. Can u please explain it clearly? What the result you got in command prompt...?

        Delete
    33. I did what you said, but most of the folders are not shown. I am sure they are not deleted because the usewd size of usb is still the same.

      ReplyDelete
      Replies
      1. It may affected by some other type of viruses...

        Delete
    34. what about deleting the autorun

      ReplyDelete
      Replies
      1. Deleting the autorun file wont affect ur drive or files...

        Delete
    35. I have faced same problem. WOW SUPER it's working fine now

      thanks a lot

      ReplyDelete
      Replies
      1. U r welcome frnd, dont forget to share this with ur frndz...

        Delete
    36. i have scanned my hardrive when it showed the shortcut and now the entire folder got deleted and empty now..but the memory is full..any help??

      ReplyDelete
      Replies
      1. Try this command Keerthu. “attrib -s -r -h *.* /s /d /l”

        Delete
    37. how to scan short cut virus my computer plz help me

      ReplyDelete
      Replies
      1. Just scan ur whole system with an updated anti virus package frnd...

        Delete
    38. wdnPvWSEwLethKA fie can't remove.

      ReplyDelete
    39. after typing del*.lnk it is showing a msg that
      'del*.lnk 'is not recognised as an internal or external command,operable program or batch file

      ReplyDelete
      Replies
      1. Abishek, u should give a space after the del command. The correct format is del *.lnk

        Delete
    40. Replies
      1. kutha pagilidhi naaayala thanks yentira baaadcow

        Delete
    41. Sorry, im nt a computer pro...
      As a matter of fact im just a lecturer of arts..
      I dont quite know how to type the cmd..
      Do i neee to put spaces in between the alphabets?
      My kaspersky wouldnt detect it...
      Shortcuts keep on cmg back...

      But, as a solution, some students of mine gave
      This amature software called Virus Remover v3.1
      Its a software developed by UiTM students of Malaysia..
      Its helpful, your filew still can run as normal, but the shortcuts never gone..
      But at least with the help of that software.. u can still use ur files...

      U may google it up, hope this helps...

      ReplyDelete
    42. This comment has been removed by the author.

      ReplyDelete
    43. I did try that command but shortcut virus are not being permanently delete. it do comes again and again!! can you further help me

      ReplyDelete
      Replies
      1. Yes, as I have already told, this method wont destroy the viruses permanently. You should scan ur system with an updated antivirus package to delete all the viruses permanently...

        Delete
    44. pendrive lagane par usme atomatic ak pendrive ki 2 kb ki short cut copy aa jati h ye attrip vali trick s b nii ja raha plz help me;;;;;;;my email addres= cbrijnandan2024@gmail.com

      ReplyDelete
    45. its working but after a refresh again same.

      ReplyDelete
      Replies
      1. Yes, as I have already told, this method wont destroy the viruses permanently. You should scan ur system with an updated antivirus package to delete all the viruses permanently...
        After applied the command and recover the files, immediately take back up of ur files then format the pen drive. Then scan ur system for viruses...

        Delete
    46. I have been cleaning my computer and the stick for zillions of time, but I can't get rid of this file (virus)
      I have followed your advise, formatted the USB and I still can't remove the bloody virus. Please help!!

      C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\asnzlvvpmp..vbe

      G:\asnzlvvpmp..vbe

      ReplyDelete
    47. gudha pagalakodatha na kodaka inkosari nv ilanti post pedithe howle ke baaal

      ReplyDelete
    48. what if i've already delete the shortcut. my pen drive memory is still there, but it is empty, what should i do

      ReplyDelete
    49. and i've already scan my pen drive after that. the antivirus said it has already neutralise the virus but...

      ReplyDelete
    50. how to type .Ink ??/
      Im so dumb in computer language shit

      ReplyDelete
    51. thx man...finally figured it out

      i buy u dinner one day

      ReplyDelete
      Replies
      1. :). I din expct u anythng my dear frnd. Dont forget to share this...

        Delete
    52. i tried but it says


      the process cannot access the file beacause it is being used by another process

      what can i do for it?

      help plsss..

      ReplyDelete
      Replies
      1. Terminate the process using the tool unlocker, then try the command...

        Delete
    53. in my pendrive, only the files outside the folder became shorcut. is it virus or something else? i tried ur method but the shorcuts still there. :(

      ReplyDelete
    54. Its also a type of virus. Scan ur system with an updated anti virus...

      ReplyDelete
    55. I used "del.ink" and it deleted the main file..

      Now when I use the "attrib -s -r -h *.* /s /d /l" it displayes an error that

      Access denied -G:\$RECYCLE.BIN\S-1-5-21-1209293696-...
      Access denied -G:\$RECYCLE.BIN\S-1-5-21-1209293696-...
      Access denied -G:\System Volume Information

      Please Help!!

      ReplyDelete
      Replies
      1. These are system files. You cant delete it. If u delete those files, they will come again and again...

        Delete
      2. So what is the solution??? How can I recover??

        Delete
      3. I got the same problem with you..... :(

        Delete
    56. I also run the CMD as an Administrator and now while using "attrib -h -r -s /s /d g:\*.*" it displays

      Access denied -G:\System Volume Information

      Please help!!!!!1

      ReplyDelete
    57. I am still waiting for the solution.. Can someone please reply for the above two comments???

      ReplyDelete
    58. Dear Sir

      Thanks for your time, i need your help
      now when i put my USB its shows to me a shortcut for
      pictures and if delete it or if i format the USB
      it will shown again and again
      what i can do
      i try to scan for viruses by bitdefender and nothing happens
      at all

      ReplyDelete
      Replies
      1. It means that ur PC is affected by viruses. Just scan the whole drives with an updated antivirus tool. If bit defender doesn't works, try any other anti virus tool...

        Delete
    59. Hi! Please help me, my pen drive is full of .lnk virus and while deleting or formatting the drive its show "the disk is write protected" so, what should i do, please help

      ReplyDelete
      Replies
      1. Try this...
        Boot ur system in safe mode with command prompt. Then format the drive using format command...

        Delete
    60. thank you so so so much! u saved my life mannnn, i really appreciate the help. this is the first method that actually works

      ReplyDelete
    61. It worked, but it will appear again. wth should i do about it???

      ReplyDelete
    62. thx that was great thx so much it really helped a lot great thx

      ReplyDelete
    63. Thanks so so so much.
      I tried it 4 times and it works well :) :)

      ReplyDelete
    64. thnx alot it works.........

      ReplyDelete
    65. can u plz tell me which antivirus will detect this cause i have used androids avast and on when mobile was connected to pc i used windows anti virus it didnt work

      ReplyDelete
    66. Does attrib -s -r -h *.* /s /d /l works on XP? cause when I try to execute it in XP it says invalid /l and when I try it in Vista and Win7 it works, and also the attrib -s -r -h /s/d e:\*.* command is this working really in Vista and Win7?

      ReplyDelete
    67. cause it says invalid switch /s /d


      please help. thanks alot
      -bon

      ReplyDelete
    68. It will definitely work on xp. Try the correct command...

      ReplyDelete
    69. i have shortcut problem in my flash drive. i have formatted it but still when i put another file in it,it become shortcut.Please help me. i want to completely remove that virus..

      ReplyDelete
    70. It worked well for me. Thanks!

      ReplyDelete
    71. hi friend i done it but again it showing the icon
      pls help me

      ReplyDelete
    72. i tried the first method but it showing invalid /l

      ReplyDelete
    73. tch. can't get rid of this annoying virus. this sucks. can someone out there help me?

      ReplyDelete
    74. Guyz, please understand that, this method will temporarily recover the affected files. But it wont delete the virus permanently. The folders may affect by those virus again and again. U need to scan ur PC completely with an updated antivirus. Thank u...

      ReplyDelete
    75. thank you so much., this is really a great help..

      ReplyDelete
    76. best way to solve the problems any kind of virus problems is....

      If you have Quick Heal, create an EMERGENCY RESCUE DISK...then boot your computer with the disk...then let it do the rest....

      ReplyDelete
    77. I've just tried that command but the whole shortcut folder had gone within the sub and all my files...
      please help me to recover my files...thats very important for me....

      ReplyDelete
    78. i have tried both the methods but all in vain. could not restore the folders from shortcuts :(
      after typing the command and hitting enter will the command prompt show any complete dailogue or anything as such? coz im unable to edit anything once i hit enter after "attrib....."

      ReplyDelete
    79. This comment has been removed by the author.

      ReplyDelete
    80. sir my pen drive's defected by shortcut virus. pls give me a perfect sol.i have use your formula but it can not work.sir i req ple's give me a true solution

      ReplyDelete
      Replies
      1. try installing usb disk security then scan your flash drive. when you already deleted the virus, then do the method again. it works for me :D

        Delete
    81. Hmm, the shortcuts are gone, but I can't see my files. I checked in the folder options to show hidden files but I still can't see them. Tried checking the properties and it said that 9GB has been used, meaning my files are still there but I can't see them?

      ReplyDelete
    82. Here is what the properties says for the folder changes to shortcuts.
      C:\Windows\system32\cmd.exe /c start dkhaflgqbi..vbs&start Cosenza" "-" "History.pdf&exit

      cmd created a program tha changed the folders. How do i write or delete this program?

      ReplyDelete
    83. thanks a lot this really works :D

      ReplyDelete
    84. i followed the above method and it really works to retrieve files in a flash drive. but in a few seconds the files turn again into short cuts as .lnk files....and i found also a .vbs files in my flash drive.is this reason why the those files will keep on appearing..pls give me some solutions...
      i already formatted my flashh drive but when i put files on it.then the files turn to short cut.as .ink file...

      pls help..

      ReplyDelete
      Replies
      1. the same also happens to me. it just goes back to the shortcuts after a few seconds. or when i try to delete the vbs file it goes back to the shortcuts also. : (

        Delete
    85. After typing " attrib -h -s -r -h *.* /s /d /l ", " Access denied - G:\System Volume Information " comes out afterwards(w/o double quote). Please help...

      ReplyDelete
    86. Yes this indeed removes shortcut virus... but check again. I think your system is already infected.... it will keep coming back... Good luck.

      ReplyDelete
    87. just use smadav..more simple

      ReplyDelete
    88. The Virus always come back and this is because it is activated from the PC.
      To stop it, you must stop the process:

      CTRL+ALT+SUPP
      Go to Process tab
      Select "wscript" process
      Press "End Process"

      After, you can use the application: "Virus shortcut Remover" to clean your flash.

      ReplyDelete
    89. it says file not found....what to do next>

      ReplyDelete
    90. it says file not found....what to do next>

      ReplyDelete
    91. Replies
      1. in my system a hidden folder named after usb the name that i used last time being created i havve tried my best to remove it but not yet succeded. what should i do plz help me...........

        Delete
    92. Thank you very much. I´ve fixed my usb with your help.
      Kept getting and error so I didn´t type the last letter and it worked.

      ReplyDelete
    93. Hi I tried the steps. My files however were not recovered. Is there any way that I can recover my files? They were extremely important.

      ReplyDelete
    94. I can see my hard drive has 70 gb of data , but when I open the drive and check , there is 0 items within that folder . I cannot see any shortcut within that which i can see when it open the drive from my television's usb port . Please help me .

      ReplyDelete
    95. Oh it resolved , thanks . Please ignore the above post

      ReplyDelete
    96. it's deleted only for 2 sec. plz help me to remove it permanently

      ReplyDelete
    97. thank u because it helps me

      ReplyDelete
    98. please help me how to delete this shortcut virus on my flash drive.. and my computer. the problem also is when i input the attrib -s -r -h *.* /s /d /l its says "the file could not find" .. please reply!thanks

      ReplyDelete
    99. I have 3 pen drives. All these pen drives have autorun viruses and also i can see a shortcut of my pendrive inside which.
      A sad thing is my memory card is also attacked by these viruses and so I cant find any files thru my mobile.

      I tried all these codes and everything is deleted. But for the next time, when i plug the drive, i can see all these viruses again.
      Please anyone help me to get rid of these viruses permanently.

      ReplyDelete
      Replies
      1. You can stop the process by cmd command:
        taskkill /f /im wscript.exe
        If for example G: is your usb drive, you do the following:
        g:
        del *.LNK
        attrib -s -r -h *.* /s /d

        Delete
    100. Awesome, Worked Like a Piece of Cake, TY So Much

      ReplyDelete
    101. Thank you so much for this. It's worked multiple times for me.

      ReplyDelete
    102. I can see my memory card has 3.16 gb of data , but when I open the drive and check , there are 0 items within that folder
      I have tried all the methods above but couldnt recover my files....
      (attrib -s -r -h *.* /s /d /l in J:/>)
      (attrib -s -r -h *.* /s /d in J:/>)
      is this because i copied some mp3 files into the memory card(those were accessable when used in my phone)...?
      plz help me..

      ReplyDelete
    103. when i open the memory card i could see the copied mp3 files only..

      ReplyDelete