Unusual appeareances of Desktop Lock and Virtual Screen icons

[jecalderon]

I am administrating a Win server 2016  running for  7 month now.  Recently, in the last 10 days or so, a number of icons and folders are appearing on my Administrator desktop. They are also appearign on users desktops.

Our users claimed not to have any part in installing these apps.  I have no way to validate if this is true or not. 

This is a virtual server and all access is u sing RDS

Pleases, may anyone here recognize this icons and feedback?  I am looking online but can not find anything about them.

[#2]

Hello @jecalderon 

Have you check for any certificates for the files following the shortcut properties. You could also check gather the file hashes and do a search for any know malware.