Unable to display hidden folder (modified registry also invalid) solution with registry File _ registry

Source: Internet
Author: User
Tags parent directory
To display the hidden file's Pass method:
Normally, you can do this in the following order: Open My Computer's Tools menu-Folder Options, in the View tab, select Show All files and folders, and find "Hide protected operating system files (recommended)" To remove the previous check. As shown in the following illustration:


Resolution of hidden files cannot be displayed after a virus has been modified by the registry:
If it is caused by the virus, there are a number of cases, here is the more commonly used two methods.

Law One: Open Registry Editor, enter registry key: Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\ Hidden\showall, change the key value of the right checkedvalue to 1, and then set the folder options according to the pass method.
If you don't see the CheckedValue, right-click in the registry Key's current window, create a new DWORD value, name "CheckedValue" (no quotes), and double-click it to set its numeric data to 1 (hexadecimal). If you do not modify, download the registry from here to edit the file, decompression, and then double-click the inside of the information imported into the registry can be.

Law two: If the above method is not good, it is possible that the virus modified the registration table file Display properties of other key values, download the file, and add the information inside the registry to restore to the original settings.

here is a complementary workaround:

You can see if the Sys.exe virus, the following is the method, even if not I want to also be able to remove the problem of hidden files can not be displayed.
Phenomenon: System files hidden cannot be displayed, double-click the letter does not reflect, Task Manager found Sxs.exe or Svohost.exe (with the system process svchost.exe a word of the difference), anti-virus software real-time monitoring automatic shutdown and can not open


Find a lot of methods on the Internet, can not be effectively deleted, and no Kill tools


To manually delete the Sxs.exe virus method:


First to show the hidden system files (here is why I can not show hidden files, NND, unexpectedly changed the registry)


Run--regedit


Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall, Modify the CheckedValue key value to 1


But may not be used, hidden files are still not shown, this is because the virus in the registry to modify the expression to hide the purpose of the file, the original valid DWORD value CheckedValue deleted, a new invalid string value CheckedValue, and the key value to 0!


Method: Delete the CheckedValue key value, right-click the new--dword value-named CheckedValue, and modify its key value of 1 so that you can select Show all hidden files and show system files.


Right-click on the partition disk--open (be sure to right-click to open), see Autorun.inf and Sxs.exe two files in each disk and directory, delete it. (Be sure to delete each disk, otherwise it's all white busy)


(It may be automatically generated at this time, so you must first delete the Sxs.exe or Svohost.exe process in Task Manager)


Open Registry Run--regedit


Hkey_local_machine>software>microsoft>windows>currentversion>run


Find the Soundmam key value, there may be two, delete the value of C:\\windows\system32\svohost.exe, and finally to c:\\windows\system32\ directory to delete SVOHOST.exe (for hidden)


Restart the computer, found that anti-virus software can be opened, partition disk double-click can be opened, all normal!

Method Two

Copy the following content to Notepad, save the file after the fall to Reg, double-click on the line
Windows Registry Editor Version 5.00


[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall]
"Regpath" = "software\\microsoft\\windows\\currentversion\\explorer\\advanced"
"Text" = "@shell32. dll,-30500"
"Type" = "Radio"
"CheckedValue" =dword:00000001
The above two is the most commonly used method, if not, use the method two try the following content

Windows Registry Editor Version 5.00

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden]
"Text" = "@shell32. dll,-30499"
' Type ' = ' group '
"Bitmap" =hex (2): 25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
00
"HelpID" = "shell.hlp#51131"

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\nohidden]
"Regpath" = "software\\microsoft\\windows\\currentversion\\explorer\\advanced"
"Text" = "@shell32. dll,-30501"
"Type" = "Radio"
"CheckedValue" =dword:00000002
"ValueName" = "Hidden"
"DefaultValue" =dword:00000002
"Hkeyroot" =dword:80000001
"HelpID" = "shell.hlp#51104"

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall] "RegPath "=" software\\microsoft\\windows\\currentversion\\explorer\\advanced "
"Text" = "@shell32. dll,-30500"
"Type" = "Radio"
"ValueName" = "Hidden"
"DefaultValue" =dword:00000002
"Hkeyroot" =dword:80000001
"HelpID" = "shell.hlp#51105"
"CheckedValue" =dword:00000001

Method Three
To the normal computer to export Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden, Copy to your computer and double-click.
Method: Start-> Run->regedit->hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\ Folder\hidden Select the hidden right button-> export, and then copy the export file to your computer, double-click
Hey, this method and method are the same, the superfluous, for what? Hey, write more points, cheat the landlord's sympathy, give a small flag, and then a just buy a computer for the children to see

Win7 Unable to show hidden file reason and resolution

Description: Open the folder, there is no way to display hidden files, click Tools-Folder Options-See all file settings are not effective, so still do not show hidden files.

The original intention of this problem may be that the computer was modified by the virus registry.

Workaround:

Create a new Notepad file and copy the following contents to the inside:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

\explorer\advanced\folder\hidden\showall]

checkedvalue=dword:00000001

and name the file to display the hidden file. Reg

The filename can be arbitrarily taken, but the suffix should be changed to. reg

If you cannot display the file suffix, click the Folder tool File option-View hide known file name extension

Resolves a problem that shows that all files and folders cannot display hidden files.

Yesterday, accidentally found that the hidden properties of the file can not display all files and folders to display the file, a process more than a SVOHOST.EXE is not svchost.exe may be in what Trojan horse. Kill the phenomenon still, should be the registry by its change, hide its identity.

Click Run on the Start menu and type regedit in the pop-up dialog box to open the registry and find Hkey_local_machine\software\microsoft\windows\

Currentversion\explorer\advanced\folder\hidden\ has two primary keys here, namely Nohidden, ShowAll (windows2000). Under the ShowAll there is a binary key value CheckedValue, the key value of the modification is "0", so it is! changed it to 1, the original thought OK, the result is still.

Change the CheckedValue value of Nohidden to 1,showall CheckedValue value is also changed to 0, dot do not show hidden ... After the confirmation, the hidden folders all appear, and then point to show all ... After the confirmation, the folder instead hid, just contrary to the facts. Although it can be done by not showing hidden ... Look at hidden files, but not always, and the menu does not have a default check, I do not know whether Windows bugs

Contrast, suddenly, the original Trojan horse to the showall of the value of the CheckedValue to REG_SZ, rather than reg_dword! So no matter whether the ShowAll CheckedValue is ==1, it doesn't work. Revert back to normal after change.

There is also the possibility that the computer is LLM.exe virus. was developed by a student from Harbin Institute of Technology. You will also change the name of your computer network. Clear is very complex, concrete clear method is as follows, earnest look must understand.

First modify the registry:

"Start"-> "Run"-> "regedit" to open Registry Editor.

[hkey_local_machine\software\microsoft\windows\currentversion\

Explorer\advanced\folder\hidden\showall]

Remove the "CheckedValue" key, because the virus has changed its type to "SZ", changing the value to "1" in a timely manner. After deletion, create a new key of type "DWORD" with the name changed to "CheckedValue" and the key value is "1".

[hkey_local_machine\software\microsoft\windowsnt\currentversion\

Winlogon]

To change the "Userinit" key content to "Userinit.exe," (including commas), we can find that the content of the key before the change of a "microsoft\* (garbled). exe", this file is actually one of the virus files.

Change the Shell key contents of the to "explorer". EXE ", at which point we can find that there is a" C:\WINDOWS\system32\dllcache\dcache.exe "in the content of the key before modification, yes, this file is the second of the virus file.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

Remove the "System" key. The content of the key is "C:\WINDOWS\system32\advanced.exe", which is the third virus file.

After the registry has been modified, enter the C disk Windows folder System32 folder, display hidden files and system files and extensions, find the hidden "advanced.exe" file (44.2kb, no icon), the file can not be deleted at this time, but may modify its file name, Change it to anything, just the next time you can find it and the filename is not the original one. Then create a new text document (in fact, anything new), change its name to "Advanced.exe" (be sure to display the extension, otherwise it will become "Advanced.exe.txt"), the property changed to "read-only" (0KB, program icon).

Then locate the "Dllcache" folder, remove the hidden "dcache.exe" file (44.2kb, no icon), go back to the parent directory, locate the "Microsoft" folder, and remove the hidden "* (garbled). exe" file (44.2kb, no icon).

Then go back to the root directory will be hidden "Llm.exe" (44.2kb, no icon) and "Autorun.inf" files are deleted. At this point, even if produced again, the resulting "llm.exe" file is the same as the "Advanced.exe" (0kb, program icon) we established before, that is, there is no harm.

Do not trust the words can be checked again in the order above, restart the computer to check again, if the registry and Windows folder there is no change can be our own establishment of the fake "Advanced.exe" deleted.


After some viruses, hidden files and folders can not be displayed!
is in any folder, I dot the "Tools ===>>" folder option ... "===>>" View "===>>" Show All Files and folders "then click" OK "or" Apply "and" OK " The computer is still unable to display hidden files and folders. Re-click the previous steps tool "===>>" folder option ... "===>>" view "found that every time they automatically changed back to the" Do not show hidden files and folders "option!

Find a way to find the Internet, so, type "regedit" in "Run", open Registry Editor, and navigate to the hkey_local_machine\software\microsoft\windows\currentversion\ Explorer\advanced\f Older\hidden\showall ", change the CheckedValue to 1, reboot is useless.

I think, this may be a virus, under a Kaspersky as antivirus software, pass kill once, or not solve the problem!

I am extremely depressed in the Internet to find this file, to solve my troubled!

Restore view hidden file options. Reg, if there are netizens also encounter and I have the same problem, with the above methods are not resolved well, download the file I provided below try, decompression, double-click Import registry can be solved?
restore view hidden file options. reg
Copy Code code as follows:
Windows Registry Editor Version 5.00

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden]
"Text" = "@shell32. dll,-30499"
' Type ' = ' group '
"Bitmap" =hex (2): 25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
00
"HelpID" = "shell.hlp#51131"

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\nohidden]
"Regpath" = "software\\microsoft\\windows\\currentversion\\explorer\\advanced"
"Text" = "@shell32. dll,-30501"
"Type" = "Radio"
"CheckedValue" =dword:00000002
"ValueName" = "Hidden"
"DefaultValue" =dword:00000002
"Hkeyroot" =dword:80000001
"HelpID" = "shell.hlp#51104"

[Hkey_local_machine\software\microsoft\windows\currentversion\explorer\advanced\folder\hidden\showall]
"Regpath" = "software\\microsoft\\windows\\currentversion\\explorer\\advanced"
"Text" = "@shell32. dll,-30500"
"Type" = "Radio"
"CheckedValue" =dword:00000001
"ValueName" = "Hidden"
"DefaultValue" =dword:00000002
"Hkeyroot" =dword:80000001
"HelpID" = "shell.hlp#51105"

Unable to import *.reg: The specified file is not a registration script.
You can import only binary registration files in Registry Editor.
This is because the registry-style files, Windows Registry Editor Version 5.00, must be on the first line, with no blank lines above. Windows Registry Editor Version 5.00 must have a blank line below. Before you can.
As shown in the following illustration:

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.