We have found a Shylock botnet on one of our servers and one of the symptoms is it replaces all files in a share with identically named shortcuts and then hiding the original files.
I need to be able to run a script to see which directories have these shortcuts in.
So there will be a logmein.exe and logmein shortcut in the same location.
Please help!

I would check with your AV vendor for help with this.  We do not write scripts on demand.  We will help you with script questions.

You already received answers at

http://powershell.org/wp/forums/topic/find-shortcuts-of-hidden-files-in-the-same-directory/

for this.

You already received answers at

http://powershell.org/wp/forums/topic/find-shortcuts-of-hidden-files-in-the-same-directory/

for this.

• Proposed as answer by Elaine JingMicrosoft contingent staff, Moderator 22 hours 47 minutes ago