ANTÍDOTO Security

USB drive full of shortcuts: what to do before formatting

Before you format

If your USB drive turned into shortcuts and files seem to have disappeared, formatting immediately can destroy useful data without fixing the source of reinfection.

Windows + USBFree diagnosisUpdated: 2026-09-20
01

First: do not click the shortcuts

Malicious shortcuts can run code before opening the content you expected. If multiple .lnk files appeared and imitate folders or documents, avoid opening them until the computer and drive are analyzed.

02

Your files may still be on the drive

In some infection patterns, real folders remain present but are marked Hidden/System. Used space on the drive can be a clue, although it is not proof by itself.

03

Scan the computer too

Windows persistence can contaminate a USB drive again after cleanup or formatting. Diagnosis should therefore include processes, startup locations and other system indicators, not only the removable drive.

04

When formatting makes sense

Formatting can be a valid step after protecting or recovering needed data and after neutralizing the source of reinfection. It should not be treated as a substitute for diagnosing the computer.

ANTÍDOTO

ANTÍDOTO is built around the flow: diagnose → show findings → remove → re-scan.

FREE DIAGNOSIS

Scan first. Decide after.

ANTÍDOTO shows the detected indicators before removal.