The issue is not limited to the physical shape of a USB flash drive. External HDDs and SSDs may also contain shortcuts and suspicious artifacts. Actual behavior depends on Windows, user actions and the execution chain.
What is similar
On any removable device, unfamiliar shortcuts can point to unexpected components. Legitimate files may seem absent while storage space remains used. These symptoms warrant investigation, not automatic conclusions.
What changes in practice
HDDs and SSDs often hold more data, backups and important files. Preserving information before cleanup is especially important; do not make formatting the first response.
Recommended investigation
Scan the external drive and the computer that used it. Record where shortcuts appeared, do not run unknown scripts and check for suspicious Windows persistence. For backup drives, protect copies that are still intact.
ANTÍDOTO scope
ANTÍDOTO supports scanning Windows and external USB/HDD/SSD devices. Published MAYUNDO remediation evidence must remain limited to reproduced and validated scenarios.
Related reading
- Checklist: what to do when you suspect MAYUNDO on a USB drive
- Did your files disappear? MAYUNDO may have hidden them
A safer scan with ANTÍDOTO
If you recognize these symptoms, you can download ANTÍDOTO and run a free scan of Windows and external devices. Review the findings before deciding on remediation, which requires a license. See the licensing plans and Resource Center. Detections and outcomes depend on the individual case.