Compared with the XP system, the file can be hidden since it can be hidden, but it is not so simple in the win7 system. Xiaobian recently saw that many users have asked if win7 can't display hidden files. What can I do? Xiaobian will also be suspicious, they will try it out, open the folder in Win7 system, want to view hidden files, click the tool option to select "Show hidden files", the result can not display hidden files. We have racked our brains and can't figure out how it would be like this? then what should we do? Then open the task manager to see, the task manager process has a more Svohost.EXE, the reason finally found, in fact, the computer was modified by the virus SVOHOST.exe registry, in fact, LLM.exe virus can also cause this Happening. Let's learn from our system home to learn that Win7 can't display hidden files caused by viruses.
SVOHOST.exe caused by a virus Win7 not show hidden files issue of
hidden attribute of the file can not display all the files and folders are displayed files, task manager process more than a Svohost .EXE is not a Trojan that may be in Svchost.exe. Killing the SVOHOST.EXE virus, the phenomenon remains, it should be the registry is changed, hiding its identity.
step 1) in the "Start" menu, click "Run" command in the pop-up dialog box, type regedit to open the registry, find HKEY_LOCAL_MacHINESoftwareMicrosoftWindowsCurrentVersionexplorerAdvancedFolderHidden here have two primary keys, respectively NOHIDDEN, SHOWALL (Windows2000) .
Step 2) has the following binary key in SHOWALL CheckedValue, it's key changes is "0", change it to "1", the thought OK, the result of the phenomenon remains.
Step 3) The value of NOHIDDEN CheckedValue changed. 1, also CheckedValue SHOWALL value to 0, ...... not show hidden point and press OK, full-display hidden folder out, then point Show all... After pressing OK, the folder is hidden. Although you can see hidden files by "do not show hidden...", and there is no default selected item in the menu, I don't know if it is a Windows bug.
original Trojan CheckedValue of the property value SHOWALL changed to REG_SZ, rather than REG_DWord! So no matter whether SHOWALL of CheckedValue == 1, does not work. After returning to change back to normal.
LLM.exe virus can not show hidden files caused problems
first modify the registry: "Start" - & gt; "Run" - & gt; "regedit" to open the Registry Editor.
Step 1) [HKEY_LOCAL_MacHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL] will be one of "CheckedValue" key to delete, because the virus has changed its type "SZ", promptly change the value to "1" can not look. After deleting, create a new key of type "DWord", change the name to "CheckedValue", and the key value is "1".
Step 2) [HKEY_LOCAL_MacHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon] in which the "Userinit" key would read "userinit.exe," (including the comma), then we can find the content of the key has a "microsoft before modification * (garbled) .exe", this file is actually one of the virus files.
Step 3) will be one of "Shell" key would read "EXPLORER.EXE", then we can find the contents of the bonds have a prior modification "C: Windowssystem32dllcachedcache.exe", yes, This is the second virus file.
Step 4) [HKEY_LOCAL_MacHINESOFTWAREMicrosoftWindowsCurrentVersionRun] wherein the "System" key to delete. The content of this key is "C:Windowssystem32advanced.exe", which is the third virus file.
Step 5) After the registry modification is complete folder into the C drive Windows System32 folder to display hidden files and system files and extensions, find hidden "advanced.exe" file (44.2kb, no icon) The file cannot be deleted at this time, but its file name can be modified, as long as you can find it next time and the file name is not the original one.
Step 6) Create a new text document (in fact, nothing new will do), changed its name to "advanced.exe" (be sure to display the extension, otherwise it becomes "advanced.exe.txt" the ), the attribute is changed to "read only" (0kb, program icon).
Step 7) to find the "dllcache" folder, delete the hidden "dcache.exe" file (44.2kb, no icon); back to the parent directory, find the "microsoft" folder and delete hidden "* (garbled) .exe" file (44.2kb, no icon).
Step 8) go back to the root of each hidden under the "llm.exe" (44.2kb, no icon) and "autorun.inf" file is deleted. At this time, even if it is generated again, the generated "llm.exe" file is the same as the "advanced.exe" (0kb, program icon) that we created earlier.
system House Tips: SVOHOST.exe explained in detail above can not view hidden files and registry modification method win7 LLM.exe caused by a virus, if they are found to Win7 can not show hidden files, you can go Task Manager to see if these two viruses are at work, if so, try the above method!