If folders on a USB drive were replaced by shortcuts, formatting immediately can destroy useful evidence and does not fix an infected Windows computer that may reinfect the drive.
What to do first
- Do not run unfamiliar .lnk or .exe files.
- Scan the Windows computer and the external drive.
- Check whether legitimate folders were only hidden.
- Remove persistence before reconnecting clean drives.
ANTÍDOTO is designed around this workflow: diagnose first, show the findings, then remediate.