Open the folder in Win7 system, sometimes can not display hidden files, click the tool option to select “ do not show hidden files & rdquo;, the result is still unable to display hidden files, if this problem occurs May be caused by the virus SVOHOST.exe and LLM.exe modified registry, here to see how to solve the problem caused by the virus win7 can not show hidden files:
SVOHOST.exe virus caused by Win7 can not show hidden files Problem
Hidden property files can't display files by displaying all files and folders. There is more Svohost.EXE in the task manager process than what Svchost.exe might have. Killing the SVOHOST.EXE virus, the phenomenon remains, it should be the registry is changed, hiding its identity.
1, in the "Start" menu click on the "Run" command, type regedit in the pop-up dialog box to open the registry, find HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionexplorerAdvancedFolderHidden here have two primary keys, respectively, NOHIDDEN, SHOWALL (Windows2000) .
2, under the SHOWALL there is a binary key value CheckedValue, modify its key value is "“0”, changed it to "1", originally thought it is OK, the result is still the same.
3, the value of CheckedValue of NOHIDDEN is changed to 1, the value of CheckedValue of SHOWALL is also changed to 0, and the point is not displayed hidden … … After pressing OK, the hidden folder is fully displayed, and then clicked again. All …… after pressing OK, the folder is hidden. Although you can see hidden files by "not hiding ……", and there is no default selection in the menu, I don't know if it is a Windows bug.
The original Trojan changed the attribute of the value of CheckedValue of SHOWALL to REG_SZ instead of REG_DWORD! So no matter whether SHOWALL's CheckedValue ==1, it doesn't work. After returning to change back to normal.
The problem caused by LLM.exe virus can not show hidden files
First modify the registry: "Start”->“Run”->“regedit”Open the registry editor.
1, [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL] delete the "CheckedValue" key, because the virus has changed its type to "SZ", and promptly changed the value to "1"" can not be seen. After deleting, the new type is “DWORD”; the name is changed to “CheckedValue” and the key value is “1”.
2, [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinLogon] Change the contents of the "Userinit" key to "lduser;userinit.exe," (with comma), then we can find that there is a "Microsoft" in the content of the key before the modification. (garbled) .exe”, this file is actually one of the virus files.
3, change the "Shell" key content to "EXPLORER.EXE", then we can find that there is a "C:WINDOWSsystem32dllcachedcache.exe" in the content of the key before the modification, yes, this Is the second virus file.
4, [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] delete the <quo;System” key. The content of this key is "C:WINDOWSsystem32advanced.exe", which is the third virus file.
5, after the registry is modified, enter the C folder Windows folder System32 folder, display hidden files and system files and extensions, find the hidden "advanced.exe" file (44.2kb, no icon), the file It cannot be deleted at this time, but you can change its file name as long as you can find it next time and the file name is not the original one.
6, create a new text document (in fact, create a new line), change its name to "advanced.exe" (must display the extension, or it will become "advanced.exe.txt"), The attribute is changed to “read only'; (0kb, program icon).
7, find the "dllcache" folder, delete the hidden "dcache.exe" file (44.2kb, no icon); back to the superior directory, find the "microsoft" folder, delete the hidden "ldquo; (garbled) .exe & rdquo; file (44.2kb, no icon).
8, and then go back to the root directory to hide the hidden "ldm.exe" (44.2kb, no icon) and "autorun.inf" files are deleted. At this time, even if it is generated again, the generated “llm.exe” file is the same as the "advanced.exe" (0kb, program icon) that we created earlier.
The above explained in detail the SVOHOST.exe and LLM.exe virus caused by win 7 can not view the hidden file registry modification method, if you find that your own Win 7 can not display hidden files, you can go to the task manager to see if it is not These two viruses are at work, if so, try the above method!