Penetration Testing

How to Remove Shortcut Virus from USB Drive

When we connect a flash drive to an infected computer and transfer any file it automatically infects the pendrive and all files are shown as Shortcut.

This virus can affect any external storage like Flash Drives, External Hard disk, Phone Memory, Memory card or any Memory Stick, this is an anonymous malware which initially released online and spreading from one computer to another and we got Shortcut of files which are in a USB drive if you try to open any file you will get an error message.

How to Remove Shortcut Virus From Pendrive / USB Drive

If your USB drive doesn’t have important files you can try to Format it, but if it contains important files then you are not going to format it, to Remove Shortcut Virus follow the Steps Below.

Step 1. Go to Start and Search for cmd, as  it appears in the start menu Right Click on it and clicks on “Run as Administrator

Step 2. Navigate to Flash Drive by typing its letter. [Let’s Say it is i ], to find your USB drive letter open “My Computer” and check for letter, type i: and hit enter.

Step 3. Type ” del *.lnk ” (without quote) in the cmd window and Hit Enter on your Keyboard.

Step 4. Now type ” attrib -s -r -h *.* /s /d /l ”  ( without quote ) and hit Enter .

It will take a few seconds to recover all your files, Now open your Flash Drive you will get Back all of your files.

How to Remove Shortcut Virus from Computer

Once you recover files into a USB drive you can use them but if you again plug in a USB Flash drive into the infected computer your flash drive will infect again, so it is better to remove the source of this virus I,e infected computer, follow the steps below to remove shortcut virus from the computer.

Step 1. First open Task Manager by pressing Ctrl + Alt + del Or Right Click on the taskbar and click on Task Manager.

Step 2. Go to the Process tab and look for process Wscript.exe, Scroll down and find any such process, Now Right Click on it, and click on End Task.

Step 3. Now go to Start and search for “regedit”, open it you will get Registry Editor to navigate to


Here look for Registry Key “odwcamszas” if found then right-click on it and delete this registry key.

This will remove Shortcut Virus from your computer, if not then try these steps.

1.  Press windows + R key, you will get Run box, type %temp% here and hit OK, now temp folder will be open look for file nkvasyoxww.vbs and delete it.

2. Go to C:Users<username>AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup.  Check Startup folder if nkvasyoxww.vbs  exist here then delete.

3. Press Windows + R key, type “msconfing” into the run box, and hit OK, it will open System Configuration, Go to the Startup tab, and look for nkvasyoxww.vbs uncheck it from startup and hit OK.

In Windows 8, Open Task Manager and go to the Startup tab, disable nkvasyoxww.vbs from here.


This will remove Shortcut Virus from your Computer or Laptop, if you face any problems feel free to comment below.

Make sure you have complete protection installed into your computer like Kaspersky Total Security if not please download and install Kaspersky Total Security or any other antivirus which provide protection from every kind of threat.

Related Articles

Back to top button