Shortcut virus is an easily spreadable and annoying combination of Worm and Trojan that hides all of your files and folders and then replaces them with shortcuts that look identical to replaced files and folders.
Once disguised it will wait patiently for a user's click and once that happens it will replicate itself and further infect the system. This rapid spread can lead to stolen personal data, some system hick-ups, and other system-related issues.
This malware mainly affects physical file transfer devices like for example and most USB drives, hard drives, and SD memory cards and it can easily transfer itself to the computer.
The advantage of this shortcut virus comparing it to others is that it is mostly undetected by a vast variety of antivirus software. So running just anti-virus software maybe not be enough to remove it from your system. Luckily for all unfortunate users that have caught this annoyance, it can be easily removed fully manually in a short time.
Firstly plugin USB, SD, or removable drive. The infection will transfer to your computer when the infected drive is plugged in so before we go to clean the computer itself, clean each removable drive that you have. Also know that infection will spread from computers into removable devices as well if it is not cleaned.
Open the File Explorer and remember under which letter is removable drive registered. Open Command prompt but with administrator privileges and go to infected rive by typing its letter followed with “:” (for example D:) and press ENTER
Once you have successfully gone to infected drive type in command prompt:
Attrib -s -r -h /s /d *.*
This will unlock all original files back into removable storage, next copy all files to your computer, and format the removable drive. Once the format is complete, unplug the removable device. Continue to clean all devices with the same method.
Now once we have cleaned all removable devices it is time to fully clean the PC
Firstly open the task manager ( CTRL + SHIFT + ESC ), in the process tab find wscript.exe or wscript.vbs, right-click on it (or both if present), and select End Task. Now close the task manager and press Start. Inside start typing in registry editor to search for it and once found open it.
Find the following key inside the registry editor:
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run
In the right panel, look for any strange-looking key names, such as odwcamszas, WXCKYz, OUzzckky, etc. For each one, run a Google search to see if it's related to shortcut viruses.
If any returns a positive match, right-click on them and select Delete. !!! Accidentally deleting an important key can cause Windows to become unstable, so double-check everything !!!.
Close the Registry Editor
Now press ⊞ WINDOWS + R to open the run dialog and type in it Msconfig followed by ENTER. Once the System Configuration window opens go to the Startup tab. In the Startup tab, look for any strange-looking .EXE or .VBS programs, select each one and click Disable. Close the Window.
Once again open the run dialog and type inside %TEMP% and press ENTER in order to open the Windows temp folder. Inside this folder delete everything.
Next in the File explorer go to
C:\Users\[username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Look for any strange-looking .EXE or .VBS files and delete them.

DigiSmirkz is a Browser Extension by Mindspark Inc. This extension offers users the ability to enrich their emails or chats with tons of new emojis. When installed it will replace your default new tab page with a variety of search.myway.com, hosted at hp.myway.com. This search engine uses information about you, collected by the extension to display unwanted targeted ads by Mindspark Partners and Ad Networks.
While surfing the internet with this extension installed and enabled, you will see additional pop-up ads, inserted ads into search results and sponsored content on web pages.
Several anti-virus applications have marked this extension as a Browser Hijacker and is therefore recommended to be removed from the Computer.
“Installing, this may take a few minutes… WslRegisterDistribution failed with error: 0x8007019e/0x8000000d Error: 0x8007019e/0x8000000d The parameter is incorrect. Press any key to continue.”Error code 0x8007019e or 0x8000000d could be due to the absence of supporting Windows 10 features since the error does not even let one use the WSL-based command line. If you are one of the users facing this problem, then you’ve come to the right place as this post will provide you with a couple of suggestions to fix it. There are two options you can check out to fix the problem, but before you do that, you need to make sure that the Windows Subsystem for Linux feature is enabled. The two options include enabling WSL using the “Turn Windows features on or off” option and using the Windows PowerShell.
Error Causes
So, next time when you or your friends encounter this problem, try these quick fixes to repair the error without any hassle. “Error 2753, The File is not marked for installation.”Note that this kind of error is not bound to only some specific files but it can also happen with any file, be it an executable file or an MSI file. To fix this error, here are some possible solutions that you could try.
Daily Bible Guide is a browser extension developed by Mindspark Inc. for Google Chrome Browser. This extension offers users a fast and easy way to find Bible passages, view daily verses, study the Bible and view the current weather. When installed, this extension changes your default search engine and your home page to MyWay.
When installed this extension gathers user browsing information such as visited websites, search queries, clicked links, and other information. This information is later used to better target ads.
While active, you may encounter additional unwanted ads and sponsored links throughout your browsing sessions. Daily Bible Guide was marked as a Browser Hijacker by several anti-virus scanners, and due to its information mining behavior, it is considered a security risk and it is not recommended to keep on your computer; being flagged for optional removal.Holiday Photo Edit is a Browser Extension for Google Chrome developed by Mindspark Inc. and offers users a basic photo editing tool alongside links to some popular editing websites.
When installed this extension changes your default search engine to MyWay and hijacks your New Tab page, changing it to HolidayPhotoEdit. It monitors user browsing activity recording visited websites and clicked links in order to learn more about the user, this data is later used/sold to better target Injected Ads.
While browsing the internet with the HolidayPhotoEdit extension enabled, users will experience more ads throughout their search results, additional sponsored links to partner products, and sometimes even pop-up ads with special giveaways designed to lure users to buy something.
Popular anti-virus scanners have marked HolidayPhotoEdit as a Browser Hijacker, and it is recommended to remove it from your computer.