ANTÍDOTO Security

Checklist: what to do when you suspect MAYUNDO on a USB drive

When a USB drive stops showing documents and starts displaying shortcuts, it is safer to follow a clear sequence rather than experiment with destructive commands. The MAYUNDO name should only be applied when compatible indicators exist.

First precautions

  1. Do not open unexpected shortcuts or unknown scripts.
  2. Avoid plugging the drive into several computers.
  3. Record file changes, error messages and used storage space.
  4. Do not rush into formatting or deleting hidden folders.

Perform a broad diagnosis

Scan Windows and the removable drive. If multiple USB drives show symptoms, pay particular attention to computers they have all used. A report helps identify links among shortcuts, scripts and persistence.

Preserve before cleaning

If documents are critical and the drive appears physically faulty, stop attempting DIY repairs. For software infections, preserve safe copies of legitimate data and remediate only components identified as threats.

Verify the result

After remediation, rescan Windows and the drive. If symptoms return, document the recurrence. A scan without known indicators is useful evidence for that scenario, not an absolute guarantee.

Related reading

A safer scan with ANTÍDOTO

If you recognize these symptoms, you can download ANTÍDOTO and run a free scan of Windows and external devices. Review the findings before deciding on remediation, which requires a license. See the licensing plans and Resource Center. Detections and outcomes depend on the individual case.