Shortcut safety for Windows 10 and 11

Find suspicious USB shortcuts before you open them

Shortcut Remover inspects Windows .lnk files, explains why an item was flagged, quarantines reviewed findings, restores hidden files, and can request a Microsoft Defender verification scan.

Free download · Local scanning · No account required · Review before removal

Publisher notice: this build is not yet code-signed, so Windows may show an “Unknown publisher” warning. Verify the SHA-256 value shown below before running it.

Shortcut Remover full scan results showing inspected files and one finding
Full-scan results show coverage, findings, and completion status.

327 / 327automated release tests passed
Quick + Fulltwo scan modes with visible coverage
Quarantinerecovery path before permanent deletion
SHA-256published for download verification

Built for careful review

Security controls you can see and understand

Quick or full scan

Use a focused check for common shortcut-virus locations or inspect the entire selected drive. Coverage counters show the directories and files processed.

Explainable findings

Review the target, arguments, risk signals, and recommended action. Shortcut Remover does not label every ordinary shortcut as malware.

Quarantine and restore

Move reviewed items into quarantine instead of deleting them immediately. History keeps the action visible and provides a recovery path.

Restore file visibility

Repair hidden attributes within the drive you selected after scanning. The tool does not invent or replace missing files.

Defender verification

Request a Microsoft Defender scan when Defender is available, then keep the verification result alongside the workflow.

Schedules and allow list

Create recurring checks for drives you use often and prevent trusted shortcuts from appearing in future findings.

A review-first workflow

From suspicious shortcut to a documented decision

  1. 1

    Select the exact drive

    Confirm the drive letter and choose quick or full scan. The scanner stays inside the resolved path boundary and skips reparse points.

  2. 2

    Inspect the evidence

    Check what each shortcut launches and why it was flagged. Access errors and safety-limit stops remain visible instead of being reported as a complete scan.

  3. 3

    Quarantine reviewed findings

    Keep a reversible record before considering permanent deletion, then restore original file visibility when appropriate.

  4. 4

    Verify and keep the history

    Request a Defender scan, review the final status, and use history or scheduled scans for follow-up checks.

Product screenshots

See the scan, schedule, and trust controls

View the screenshot gallery

Current Windows release

Download Shortcut Remover 8.0.0

Self-contained Inno Setup installer for 64-bit Windows 10 and Windows 11. No separate .NET installation is required.

Download the installer

Version
8.0.0
File size
53,959,062 bytes (about 51.5 MiB)
Build
8.0.0-rc-1786773149059
Signature
Not code-signed
SHA-256
5F01CDDCC013DD1CAD3086BA67A5AA0E2C2989774E1854901165CE7760EBB834

Practical Windows guides

Understand the warning signs before you act

Important limitations

What Shortcut Remover does—and does not do

Does every .lnk file mean the drive is infected?

No. Windows uses shortcuts legitimately. Review the target, command-line arguments, location, and surrounding file changes before deciding that a shortcut is suspicious.

Will restoring visibility recover deleted files?

No. Visibility repair can clear hidden attributes on files that still exist. It cannot recreate files that were deleted, overwritten, encrypted, or lost because a drive is failing.

Why is the installer not digitally signed?

Code signing is deferred to the publisher for this release. Windows may display an unknown-publisher warning. The exact SHA-256 value is published so you can verify that the downloaded file matches the tested build.