If your USB drive turned into shortcuts and files seem to have disappeared, formatting immediately can destroy useful data without fixing the source of reinfection.
First: do not click the shortcuts
Malicious shortcuts can run code before opening the content you expected. If multiple .lnk files appeared and imitate folders or documents, avoid opening them until the computer and drive are analyzed.
Your files may still be on the drive
In some infection patterns, real folders remain present but are marked Hidden/System. Used space on the drive can be a clue, although it is not proof by itself.
Scan the computer too
Windows persistence can contaminate a USB drive again after cleanup or formatting. Diagnosis should therefore include processes, startup locations and other system indicators, not only the removable drive.
When formatting makes sense
Formatting can be a valid step after protecting or recovering needed data and after neutralizing the source of reinfection. It should not be treated as a substitute for diagnosing the computer.
ANTÍDOTO is built around the flow: diagnose → show findings → remove → re-scan.
Scan first. Decide after.
ANTÍDOTO shows the detected indicators before removal.
