Flash drives, being one of the most common devices, are attacked by viruses much more often than any others. First of all, due to the fact that the device is portable, which means it can be used to infect the maximum number of computers, even those that are not connected to the global network. After some time, the user may notice that all the folders on the USB flash drive have become shortcuts. How to recover data and get rid of viruses, read the article.
Invalid Actions
Often, after a problem occurs, a person follows the very first tip and formats a USB drive. Of course, the problem goes away for a while, but all data is lost. Yes, and with this approach, no one can give guarantees that after some time the events will not repeat. I must say that user data does not disappear anywhere. The virus simply hid them, and tries to submit links to its launch as source content.
Do not try to open something if all the folders on the flash drive become shortcuts. Malicious programs usually create a link to their launch. Along with this, a code that infects a computer can be added to the script.
But do not underestimate the virus writers, naively believing that if all the folders on the flash drive became shortcuts, but nothing was done with them, then the PC is completely protected. Most likely, the malicious program copied itself into the internal memory even during the initialization of the device immediately after it was connected.
Only deactivated startup from all media and the latest version of the antivirus can eliminate this probability.
Start recovery
What should I do if the folders on the flash drive become shortcuts? You must first remove the malware. To find out where the virus is copied, right-click on any shortcut on the drive. In the menu that appears, click on the "Properties" line. In the window that opens, examine the "Object" field. It contains the path to the binary file that should be deleted. It is with its help that the virus is launched.
Malicious software may be located in a directory that the drive did not previously have, in which case it is advisable to clear the entire folder. If the folder on the USB flash drive has become a shortcut, in addition to the USB device itself, it is worth checking two directories:
- C: \ Users \ UserName \ AppData \ Roaming.
- C: \ Documents and Setting \ UserName \ Local Settings \ Applications Data.
If you find in them any file that has the extension "exe", be sure to perform a full scan of your computer with an antivirus utility.
Why antiviruses do not always help
Sometimes it is impossible to get rid of malware manually, moreover, the installed antivirus also becomes powerless. The fact is that many worms can infect security programs.
"Folders on the flash drive have become shortcuts. How to remove the virus?" - the user will ask. In fact, you won’t have to perform any complicated actions, unless you spend a little more time creating a special boot disk.
CD
If folders on the USB flash drive become shortcuts, it is best to use a special tool from Dr.Web called LiveDisk to create a boot disk and remove malware. You can download it on the official website of the developer. For home use, the product is distributed free of charge.
After downloading LiveDisk, you must additionally install the UltraISO program. After installation, the application will integrate its functionality into the explorer. This simplifies the burning process.
Just double-click on the image icon with the antivirus. After that, UltraISO will start immediately. Just click on the "Record" button and insert the disc into the drive.
Bootable USB stick
It is not always possible to find a blank disc, sometimes there is simply no DVD-ROM burner when the computer was subjected to a virus attack, and the folders on the USB flash drive became shortcuts. What to do in this case? Just create a bootable USB drive. And to do this is much easier than burning a CD.
- Download Dr.Web LiveDisk, created specifically for USB devices. Remember that such utilities must be obtained only on the developer's website to avoid risks.
- Open the file called "drwebliveusb.exe". If any errors occur during its loading, open the context menu by right-clicking and then select "Run as administrator".
- Insert the USB flash drive into the USB port.
- In the main application window, specify the device that will be used as the boot device.
- Check the box next to "Format." Now it remains only to click on the "Create" button.
During the recording of system files, all data will be deleted from the drive. Save them in advance.
Computer preparation
If the folders on the USB flash drive become shortcuts, the recovery procedure should be continued with the BIOS setup. To enter the configuration program, press the "DEL" button when the very first messages appear on the monitor screen. The key may be different. To find out for sure exactly how to start the configuration utility, you should familiarize yourself with the manual that came with the motherboard. It can be found on the manufacturer’s website.
Once in the BIOS, go to the "Boot" or "Advances" tab. Here you should switch the parameter recorded on the line "First Boot Device" to "USB" or "DVD-ROM", depending on which device is used.
To exit with saving all settings, select "Exit and Save".
Check
If the folders on the USB flash drive become shortcuts, Windows 7, in all probability, is already infected, which means that you won’t be able to get rid of the problem for a long time without scanning the system completely. To do this, select Default on the first screen of LiveDisk. If after that the antivirus works unstable or does not start at all, it is worth rebooting the computer, preferring the Safe mode option.
After some time, the screen will display a desktop resembling the Windows environment. At the same time, the Control Center will boot. In case of failure of its automatic launch, click on the button with a spider view - it is located in the place of the Start menu. Then click on the inscription "Control Center"
Find the "Tools" button, which is located at the top of the window, and click on it. In the panel that opens, select "Settings". In the first settings tab, determine what actions will be applied to objects that pose a threat to the computer. In each line here you need to set the value "Delete". Do not worry about data safety. If the folder on the USB flash drive has become a shortcut, it is simply hidden, but not infected, respectively, and will not be deleted.
There are two fields in the bottom area of ​​the Scanner tab. The first determines what the maximum size of files scanned by antivirus will be. It is best to enter "0" here, that is, remove the restrictions. The second indicates how many times each object will be scanned. It is advisable to enter a value of "5". Be sure to check the box next to "Scan archives". Without it, the removal of the virus may not occur if the folders on the flash drive become shortcuts.
Close the settings window and go to the "Scanner" tab, which is located in the "Control Center" window. Click on the "Custom Scan" button. The user is prompted to select devices that need to be scanned. It is worth noting the checkboxes all available in the system. After that click on the "Scan" button.
Scanning can take a long time, which depends on the amount of information on the disks and the speed of data exchange. When this process is completed, it remains to click on the line "Exit". After rebooting, reset the BIOS settings to their original values.
Attributes
If the folders on the USB flash drive become shortcuts, checking the system with antivirus software is only the first stage of recovery. After scanning, you must also return the data. As noted earlier, they were not modified or deleted, but they do not appear in the Explorer window. By changing the attributes, you can see your documents again. Moreover, you can perform this operation in several different ways.
Manual way
If on a flash drive all folders have become shortcuts to restore attributes, follow the instructions:
- Open the Start menu and click on the Run button.
- Move the cursor to the input line and write "cmd", then click on the inscription "OK".
- A command prompt window will appear on the screen. First go to the root of the USB drive by typing "cd / d X: \". After that, press the "ENTER" button. The letter "X" should be replaced by the one used in the system to access the flash drive.
- The next command to execute is attrib -s -h / d / s.
- Having completed all the steps correctly, you will again be able to observe in the explorer all the missing folders and files.
Process automation
If the folders on the USB flash drive become shortcuts, you can simplify the process of resetting attributes.
- Launch the Notepad program. It is located in the "Accessories" directory of the "Start" menu. You can simply type the word "notepad" into the input line of the Run window.
- In the text editor, copy the combination "attrib –s –h / d / s" (without quotes).
- Click on the inscription "File", which is located at the top of the program, and click on the line "Save".
- Specify the name that will be assigned to the document, for example: "name.bat". As you can see, after the point the extension is indicated, which differs from the standard. Be sure to use the word "bat", otherwise the desired result cannot be achieved.
- Transfer the document created in notepad to the USB drive. Now just run the file as a regular program. It can be either removed or left in case of re-infection.
Many users are faced with a situation when it is not the first time that folders on a flash drive have become shortcuts. What if the problem recurs systematically? The answer is obvious: install antivirus and regularly update signature databases. Also, do not use a portable device to work on someone else's computer - it is highly likely that malware comes from outside.