This is the method the secure32.exe virus uses to run when a USB device is connected to the computer. This command requires Windows ME/2000 or newer. If this command is used with a document, an associated program that can open the document will be automatically run. Mostly used to open documents automatically.
![how to open shortcut files in usb how to open shortcut files in usb](https://www.easeus.com/images/en/data-recovery/drw-pro/remove-shortcut-virus-cmd.png)
The SHELLEXECUTE command opens a document or starts an application. The batch file may take a while depending on the amount of File and Folders located on the USB Device. The drive letter F:\ will need to be changed to the letter which corresponds to the USB device, if not the commands will not work. The lines that need to have changes to it: If using the batch file or remember to change the drive letters to the letters corresponding to the USB Device letters. The Shortcut folders will still need to be deleted manually and also maybe the Random Numbered folder created by the Virus. The batch file can be used after running Kaspersky Virus Removal Tool 2011 to change the file and folder permissions. When the batch file and option is used is removes the attributes (-r -h -s) added to the folder(s)by the virus and relates the virus and numbered folder but the virus is still hidden somewhere on the system.
#HOW TO OPEN SHORTCUT FILES IN USB SOFTWARE#
The batch files and autorun.inf option was a temp fix until I got an antivirus software to completely remove the virus.