Desktop links replaced with shutdown

by CP510   Last Updated October 11, 2018 15:01 PM

I have a very curious question.

Periodically, the shortcut links on my desktop have their targets replaced to link to shutdown.exe, or more specifically..

%windir%\System32\shutdown.exe -s -f -t 00

Now, I have no idea why this happens. And it's happened basically since I built this box about 6 months ago. Usually I navigate through start menu, and given I'm wise to this trickery, I check my desktop shortcuts before clicking them.

There doesn't appear to be a pattern. They aren't deleted applications, they aren't from the same publisher. Got nothing.

Any ideas?

Related Questions

Updated February 03, 2019 20:01 PM

Updated February 26, 2016 01:00 AM

Updated March 07, 2018 18:01 PM

Updated October 04, 2017 23:01 PM

Updated July 03, 2015 13:00 PM