How To Remove Shortcut Virus ?
Many a times, my computer is affected by viruses, and my computer get rid of it, through an anti-virus programs installed in it, but this time it was affected by a new kind of virus, which even my anti-virus found hard to detect and remove it, It was a virus, which created short-cut’s of all the folder’s and files, which exits’ on the pen drive, or a new external drive, when it is inserted. Commonly known as the short-cut virus, this virus is from the family of “Trojan’s” and is known as “Trojan Delf”. Later on, I also learn that we can delete the virus, without using any anti-virus program, manually.
STEPS:
Step:1
Press
Step:2
Open Windows Explorer by pressing <Win> + <E>, find and remove Services.exe from this path:Path: - C:\Documents and Settings\<username>\Local Settings\temp
The user name here means the login name of current user.
Step:3
Press
Step:4
Expand the tree on the left panel, find:HKLM\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon

Step:5
Double click on the "Shell" on the right panel, and Enter "Explorer.exe" in the popped up window.
Step:6
Download Process Explorer from Microsoft official site.
Step:7
Launch Process Explorer, right click on smss.exe and Kill Process:
Step:8
Then, the same way to kill winlogon.exe
Step:9
Redo the 5th step again, to make sure that the registry value has been fixed.Step:10
Scan your computer with your security software.