How to Find Files Hidden by a USB Shortcut Infection

Updated on Oct 17, 2026 | by Qiling

Quick Navigation:

Do Not Launch the Suspicious Shortcuts
Before You Scan
Scan Only if the Originals Are Missing
Clean the Device After Data Is Safe
Frequently Asked Questions

A shortcut infection often hides original folders and displays deceptive .lnk files. This is not automatically deleted-file loss, so begin with safe inspection rather than immediate formatting.

Do Not Launch the Suspicious Shortcuts

Avoid opening unexpected shortcut files or executables on the USB drive. Disconnect it from other computers and run a trusted security scan on the Windows PC when appropriate.

In File Explorer, enable viewing hidden items and inspect the device for original folders without running unknown programs. Make a copy of intact files to a clean disk after a security check.

Before You Scan

Do not format the USB stick until important data is secure. Avoid writing cleanup tools to the infected device.

Use a separate clean destination. If files are hidden rather than deleted, copying verified originals is preferable to a recovery scan.

Scan Only if the Originals Are Missing

Qiling Deep Data Recovery can scan an accessible Windows drive for files that are no longer visible. The steps below use the mode that fits this case; scan results are possibilities, not a guarantee of intact recovery.

Step 1. Inspect Safely

Show hidden items and check whether the expected files remain. Run an antivirus scan and avoid launching shortcut targets.

Free Download
Windows 11/10/8/7, 100% Secure

Step 2. Choose USB/SD Scan

If the original files are truly absent, choose USB/SD Scan. A file that is merely hidden does not need undelete recovery.

Choose USB scanning after shortcut infection

Step 3. Select the Infected USB Device

Identify the USB by capacity and label. Do not scan the clean destination or execute any scan result directly from the device.

Step 4. Preview Personal Files

Filter for your document and photo types. Preview content, but treat recovered executables and scripts as unsafe until separately checked.

Step 5. Recover to a Clean Disk

Save selected personal files to the clean destination, scan those copies for malware, and open them only after they are checked.

Clean the Device After Data Is Safe

Once important files are verified elsewhere, remove the infection with trusted security tools and decide whether to reformat the USB stick. Keep a separate backup before reusing it.

If the same shortcuts return immediately, the PC may still be infected. Investigate the computer as well as the USB device.

Frequently Asked Questions

Are .lnk files my original photos and documents?

No. They are shortcuts; check for hidden originals and avoid opening suspicious targets.

Will showing hidden items recover deleted files?

It only reveals existing hidden files. Use a scan if the originals are actually missing.

Is it safe to recover .exe files from an infected USB?

Treat executables as untrusted and obtain clean installers from official sources instead.