Win7 System folder cannot display hidden files

Open folder in Win7 system, sometimes can't show hidden file, click tool option Select "Do not show hidden file", result still can't show hidden file, If this problem may be caused by the computer being modified by the virus SVOHOST.exe and LLM.exe, the following is a look at how to troubleshoot a virus-induced Win7 cannot display hidden files:

WIN7 caused by SVOHOST.exe virus cannot show hidden file problems

Files that hide properties cannot display files by displaying all the files and folders, and a Svohost.EXE in the Task Manager process is not what Svchost.exe might have been. Kill SVOHOST.EXE virus, the phenomenon is still, should be the registry by its change, hide its identity.

1, in the "Start" menu, click the "Run" command, in the pop-up dialog box type regedit open the registry, find Hkey_local_ Machinesoftwaremicrosoftwindowscurrentversionexploreradvancedfolderhidden here there are two primary keys, respectively, Nohidden, SHOWALL ( Windows2000).

2, under the ShowAll has a binary key value CheckedValue, its key value modification is "0", to change it to "1" after the original thought OK, the result is still the phenomenon.

3, change the CheckedValue value of Nohidden to 1,showall CheckedValue value also changed to 0, dot not show hidden ... After the confirmation, the hidden folders all appear, and then point to show all ... After the confirmation, the folder instead hid. Although you can see hidden files by "Do not show hidden ...", and there is no default selection in the menu, I wonder if Windows bugs.

The original Trojan to the showall of the checkedvalue of the value of the property to REG_SZ, rather than reg_dword! So no matter whether the ShowAll CheckedValue is ==1, it doesn't work. Revert back to normal after change.

Problems caused by LLM.exe virus cannot show hidden files
First modify the registry: "Start"-> "Run"-> "regedit" to open Registry Editor.

1, [Hkey_local_machinesoftwaremicrosoftwindowscurrentversionexploreradvancedfolderhiddenshowall] will be one of the " CheckedValue "key Delete, because the virus has changed its type to" SZ ", in time to change the value to" 1 "can not be viewed. After deletion, create a new key of type "DWORD" with the name changed to "CheckedValue" and the key value is "1".

2. [Hkey_local_machinesoftwaremicrosoftwindowsntcurrentversionwinlogon] Change the "Userinit" key contents to "Userinit.exe," (including commas), At this point we can find that the content of the key before the change of a "microsoft* (garbled). exe", this file is actually one of the virus files.

3, change the "Shell" key content to "explorer". EXE ", at which point we can find that there is a" c:windowssystem32dllcachedcache.exe "in the content of the key before modification, yes, this is the second virus file.

4, [Hkey_local_machinesoftwaremicrosoftwindowscurrentversionrun] will remove the "System" key. The content of the key is "C:windowssystem32advanced.exe", which is the third virus file.

5, after the registry has been modified to enter the C disk Windows folder System32 folder, display hidden files and system files and extensions, find hidden "advanced.exe" file (44.2kb, no icon), the file can not be deleted at this time, but its file name could be modified, Just the next time you can find it and the filename is not the original one.

6, create a new text document (in fact, anything new), change its name to "Advanced.exe" (be sure to show the extension, otherwise it will become "Advanced.exe.txt"), the property changed to "read-only" (0KB, program icon).

7, find "Dllcache" folder, delete the hidden "dcache.exe" file (44.2kb, no icon); Go back to the parent directory, locate the "Microsoft" folder, and remove the hidden "* (garbled). exe" file (44.2kb, no icon).

8, back to the root directory will be hidden "Llm.exe" (44.2kb, no icon) and "Autorun.inf" files are deleted. At this point, even if produced again, the resulting "llm.exe" file is the same as the "Advanced.exe" (0kb, program icon) that we established previously.

Above explained in detail the SVOHOST.exe and LLM.exe virus causes the win 7 cannot view the hidden file The registry modification method, if discovers own win 7 also cannot show the hidden file, may go to the task Manager to see whether these two kinds of virus in mischief, if is, uses the above method to try!