mopsowy

Q: SHORTCUT VIRUS! FOLDERS INTO ---> '.ink' EXTENSION

PLEASE HELP!!!

 

I plugged in my external HDD to a PC.

 

Now all folders and files are shown as SHORTCUTS with an extension .ink .

 

I read a lot about it and i know this is some kind of Virus. The files are still on the HDD drive, because it is still full.

 

Did anyone had the same Problem?! I read that it is quite common issue on PCs.

 

The Files are very important to me, please help.

 

HOW CAN I FIX IT?!

MacBook Pro, Mac OS X (10.7.4)

Posted on Sep 26, 2012 3:13 PM

Close

Q: SHORTCUT VIRUS! FOLDERS INTO ---> '.ink' EXTENSION

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Sep 26, 2012 3:41 PM in response to mopsowy
    Level 10 (207,931 points)
    Applications
    Sep 26, 2012 3:41 PM in response to mopsowy

    I read a lot about it and i know this is some kind of Virus.

     

    What did you read, and how do you know this?

  • by thomas_r.,

    thomas_r. thomas_r. Sep 27, 2012 3:49 AM in response to mopsowy
    Level 7 (30,889 points)
    Mac OS X
    Sep 27, 2012 3:49 AM in response to mopsowy

    It looks like this is some kind of Windows issue. From what I found via Google, the cause is unclear, but something on the PC you connected that hard drive to - possibly a Windows virus - did that. You definitely won't find the cause, or a cure, on a Mac forum. If it was a virus, your Mac is safe, as Windows viruses cannot spread to Macs.

     

    Do you have backups of that data? If so, just erase the hard drive and restore the data from backup. If not, this may be an unpleasant learning experience on the importance of backups.

  • by dmdimon,

    dmdimon dmdimon Sep 27, 2012 4:55 AM in response to mopsowy
    Level 3 (840 points)
    Sep 27, 2012 4:55 AM in response to mopsowy

    just search on drive for some known filename. All of them'll be nearby.

     

    Mac uses some special invisible files for this and that - and Windows know nothing about them. But Windows _anti_virus software can be very paranoid about files that pretend to be invisible or like that. So dont be upset if you'll find a lot of your data in quarantine.

  • by steve_brighterfutures,

    steve_brighterfutures steve_brighterfutures Oct 31, 2012 9:40 AM in response to mopsowy
    Level 1 (0 points)
    Oct 31, 2012 9:40 AM in response to mopsowy

    This site shows how to revert them if you have access to a PC, http://joshtam.net/world/shortcut-ink-virus.html, but I don't know of any cures on Mac yet, having come across this several times in my school recently.

  • by lila f,

    lila f lila f Mar 26, 2014 3:13 AM in response to mopsowy
    Level 1 (0 points)
    Mar 26, 2014 3:13 AM in response to mopsowy

    I have the same problem, two of my external hard drives have been infected by the shortcut virus.

    Problem is, they contain raw material and editing project files of all my films!!!

    Since I'm a filmmaker that's not a light matter!!!

    It's time and would be helpful if someone from Apple took the time to solve this question!

    I'm wondering if all my Time Machine Backups are also going to be infected by the virus.

    Who cares if its of PC or Mac origin: it's affecting Mac related material!

    I cant open the films that i edited on Mac!! (using avid mc)

     

    So far, the only link I've found to remove the malware using a Mac is this one:

     

     

    http://www.thenetizens.net/2013/07/remove-shortcut-link-virus-usb-restore.html#. UzKhDssayK0

     

    No garanty it works, I haven't tried it yet...

  • by thomas_r.,

    thomas_r. thomas_r. Mar 26, 2014 2:35 PM in response to lila f
    Level 7 (30,889 points)
    Mac OS X
    Mar 26, 2014 2:35 PM in response to lila f

    This is a problem caused by Windows malware, as pointed out before. It doesn't matter one bit whether the files on that drive were created on a Mac or a PC.

     

    If the technique mentioned in that link works, and there's a hidden folder containing all your original files, count yourself lucky. If you did not have backups of those files, the outcome could have been much worse (and still may be... if you don't find such a hidden folder, your files may be gone for good without backups).

  • by lila f,

    lila f lila f Mar 26, 2014 3:10 PM in response to mopsowy
    Level 1 (0 points)
    Mar 26, 2014 3:10 PM in response to mopsowy

    Yes, but apparently my MacBook Pro DID spread the shortcut virus, from one contaminated external hardrive to another...

    I'm afraid it might contaminate my Time Machine device or any other device - especially if it is not formatted for Mac (fat32 for ex)...

  • by 60nocolus,

    60nocolus 60nocolus Mar 26, 2014 4:10 PM in response to mopsowy
    Level 1 (0 points)
    Mar 26, 2014 4:10 PM in response to mopsowy

    Had same issue with my external HDD like one year ago, never after plugged it in another windows. I ended up fixing it by renaming my HDD after removing and pluging several times, I really can't tell if it was luck or what. It was formated on an exFAT. Hope I helped..       obs: just had same issue on a pen drive..

  • by thomas_r.,

    thomas_r. thomas_r. Mar 26, 2014 5:19 PM in response to lila f
    Level 7 (30,889 points)
    Mac OS X
    Mar 26, 2014 5:19 PM in response to lila f

    Yes, but apparently my MacBook Pro DID spread the shortcut virus, from one contaminated external hardrive to another...

     

    No, that is not possible. This is not malware that is capable of running on a Mac, so it cannot spread on the Mac or contaminate any other devices. Only the infected PC can cause this to happen... so you must have connected both those hard drives to some infected Windows PC.

  • by ChinmayMM,

    ChinmayMM ChinmayMM May 3, 2015 9:51 PM in response to dmdimon
    Level 1 (0 points)
    May 3, 2015 9:51 PM in response to dmdimon

    Thank you so much. It worked

  • by Radhaamar,

    Radhaamar Radhaamar Sep 23, 2015 2:38 AM in response to mopsowy
    Level 1 (0 points)
    Sep 23, 2015 2:38 AM in response to mopsowy

    open terminal type "defaults write com.apple.finder AppleShowAllFiles false" press enter and type "killall Finder" press enter

    now you will see a folder without any name " " in the hdd u can collect files from there