Tuesday, May 26, 2015

ShortCut Virus Rempver (with links) also from system


Links:

http://www.mydigitalbuzz.net/2014/10/remove-shortcut-virus-pc-laptop-pendrive/

http://www.itechfever.com/remove-shortcut-virus/#comment-528



How to Remove Shortcut Virus from USB Flash Drive and Computer.

Posted By Filed Under: Virus Fix
Pendrive, SD Cards or Flash drives are very common device to transfer data from one computer to another, also sometimes we get errors while connecting pendrive to Computer and during data transfer one of them is Shortcut Error, basically this is a Virus known as Shortcut virus, it converts every files into shortcut in pendrive / Hard drive.

What is Shortcut Virus and How it Spread.

When we connect a flash drive to a infected computer and transfer any file it automatically infect pendrive and all files shown as Shortcut. This virus can affect any external storage like Flash Drives, External Hard disk, Phone Memory, Memory card or any Memory Stick, this is an anonymous malware which initially released online and spreading from one computer to another and we got Shortcut of files which are in USB drive if you try to open any file you will get error message.
You Can See How Files are Showing in Removable Disk (D:)
Shortcut Virus

How to Remove Shortcut Virus From Pendrive / USB Drive.

If your USB drive don’t have important files you can try to Format it, but if it contains important files then you are not going to format it, to Remove Shortcut Virus follow the Steps Below.
Step 1. Go to Start and Search for cmd , as  it appears in start menu Right Click on it and Click on “Run as Administrator“
Step 2. Navigate to Flash Drive by typing its letter. [ Lets Say it is i ], to find your USB drive letter open “My Computer” and check for letter, type i: and hit enter.
Step 3. Type ” del *.lnk ” (without quote) in cmd window and Hit Enter on your Keyboard.
Step 4. Now type ” attrib -s -r -h *.* /s /d /l ”  ( without quote ) and hit Enter .
Shortcut Virus Removal
It will take few seconds to recover all your files, Now open your Flash Drive you will get Back all of your files.

How to Remove Shortcut Virus from Computer.

Once you recover files into USB drive you can use them but if you again plug in USB Flash drive into infected computer your flash drive will infect again, so it is better to remove source of this virus i,e infected computer, follow the steps below to remove shortcut virus from computer.
Step 1. First open Task Manager by pressing Ctrl + Alt + del Or Right Click on taskbar and click on Task manager.
Step 2. Go  to Process tab and look for process Wscript.exe , Scroll down and find any such process, Now Right Click on it and Click on End Task.
Step 3. Now go to Start and search for “regedit” , open it you will get Registry Editor navigate to
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run
Here look for Registry Key “odwcamszas” if  found then right click on it and delete this registry key.
 remove shortcut virus
 This will remove Shortcut Virus from your Computer, if not then try these steps.
1.  Press windows + R key, you will get Run box, type %temp% here and hit OK, now temp folder will be open look for file nkvasyoxww.vbs and delete it.
2. Go to C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup.  Check Startup folder if nkvasyoxww.vbs  exist here then delete it.
shortcut virus delete
3. Press Windows + R key, type “msconfing” into run box and hit OK, it will open System Configuration, Go to Startup tab, and look for nkvasyoxww.vbs uncheck it from startup and hit OK.
In Windows 8, Open Task Manager and go to Startup tab, disable nkvasyoxww.vbs from here.
Shortcut Virus Removal
This will remove Shortcut Virus form your Computer or Laptop, if you face any problem feel free to comment below.
Make sure you have complete protection installed into your computer like Kaspersky Total Security if not please download and install Kaspersky Total Security or any other antivirus which provide protection from every kind of threat.
- See more at: http://www.itechfever.com/remove-shortcut-virus/#sthash.bvXkN6xp.dpuf










  7. dimitri says
    i really appreciated the second steps! it really works for me! Thanks for everything. this virus is really really sucks for me and for my computer. this virus came from my Friends Flashdisk.
    Reply
  12. Surinder Dhiman says
    shortcut delete simpal mathad (1)go tu task manager enter
    (2)End Task Wscript.exe file
    (3)and your pendrive SD Card connect your Camputer Leptop and select all shortcut and delete all shortcut your problam solve it Surinder Dhiman
    Reply
  13.  says
    pls note after removing link files by *.lnk my all file link are removed from the usb drive.
    after that i did the attrib -s -r -h *.* /s /d /l now in my use all files are removed. pls help ..what to do to restore my files???
    Reply
  14. yasir says
    when i format it says that my disk is write protected. i could not use any either of the method you shows me. please tell me how to fix my problem. its full with viruses
    Reply
  15.  says
    It turns out that my computer was infected by this. I keep reformatting my flash drive but it just keeps on returning. That’s when I decided to look inside my machine, and there it was. Thank you so much for this tutorial!
    Reply
  18. Faheem says
    Hi, dear please find me solution:
    I just follow the procedure, i opened the directory and follow the path: HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run.
    I found tkgrklxjri.vbs (value set as – wscript.exe //B “C:\Users\FAHEEM~1\AppData\Local\Temp\tkgrklxjri..vbs”) file instead of odwcamszas. so what to do now??
    Reply
  25. Arfa says
    My drives have been infected with shortcut virus, when i open a folder, there is a shortcut of the same folder present inside it, tried removing it and when i restart it comes back. AVG does detect it and removes it but it comes again. Even in my usbs, it goes away and then comes back again. My files don’t get hidden but a shortcut folder of the same name gets created inside it.
    Reply
  26. Bob Gaius says
    I have to give a thumbs up to you for this lovely information.
    I tried all the methods given but the problem persisted.
    Out of curiosity, I just decided to perform a Boot-Time Scan with Avast Premier and it seems to have worked but I’m not 100% certain if it’ll solve the issue forever. Your feedback is needed.
    Reply
  27. Noel says
    Hi! I can’t find Wscript.exe on my computer, and i can’t also open the regedit on START.Please help me to solve the problem the shortcut virus on my computer.
    Many thanks………………….
    Reply
  31. Harris says
    I have followed the steps and after I type the attrib thingy it says access denied and when I look to my folder my filed aren’t there anymore. They were in shortcut but I could still see them. Now I can’t anymore. Please help I have a lot of valuable info
    Reply
  32. mostafa says
    i tried everything but seems that the virus isn’t in my laptop because i didn’t find “odwcamszas” or “nkvasyoxww.vbs” or wscript ,It’s on my usb,but when i try to type ” attrib -s -r -h *.* /s /d /l ” it says access denied
    Reply
  33. Tharun says
    i didn’t find any name like “odwcamszas” or “nkvasyoxww.vbs” anywhere in mt lappy but still virus exist in my system ………what sholud do now.
    Reply
  34. Grace says
    I followed the instructions exactly, I ran cmd as administrator, and type the exact command. I waited for the new command line before I checked the drive, but still everything is in shortcut. Dunno what happened. Repeated it three times, but it still did not work. I may be doing something wrong. Need your help.
    P.S. The drive I’m fixing is a my phone’s memory card.
    Reply
  35. Lealyn says
    How do I take out the shortcuts on my USB, I tried to take out the .lnk but it says invalid switch
    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *
 
 
- See more at: http://www.itechfever.com/remove-shortcut-virus/#comment-528
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)