When folders and documents are replaced by shortcuts, the problem may be on the external drive, in Windows, or both. The first goal is to understand the pattern before deleting files.
What people usually mean by “shortcut virus”
“Shortcut virus” is a common name for infections that hide or disguise legitimate content and place .lnk files in its place. A shortcut may launch malicious code while also opening the expected folder to appear normal. The exact malware family can vary.
Why the infection can return
Removing shortcuts from the USB drive does not fix the root cause when the computer still has a malicious executable or persistence mechanism. A cleaned drive can be altered again after reconnecting to the affected Windows system.
What to check before formatting
Do not run unknown shortcuts or executables. Check whether the drive still contains used space, scan Windows and the USB drive, review Hidden/System attributes, and inspect persistence locations. Formatting the USB without treating the computer may only restart the cycle.
How ANTÍDOTO approaches the problem
ANTÍDOTO correlates suspicious shortcut patterns, unexpected executables, known indicators and Windows persistence. The scan is free and shows findings before removal. A re-scan after cleanup checks the reinfection indicators supported by the installed version.
A .lnk file, a suspicious filename or a missing digital signature alone does not prove that a file is malware. Context and correlation matter.
Scan first. Decide after.
ANTÍDOTO shows the detected indicators before removal.