Subscribe Subscribe | Subscribe Comments RSS

Google
 

XP: “Show hidden files and folders” Doesn’t Work

Posted on Nov 26, 2007 under Windows XP Tips |

A common virus disables the Show hidden files and folders function in Windows XP. Here is how to enable it again.

The symptom of this problem is every time you select the Show hidden files and folders options under Folder Options, the screen just flashes when you click OK and the hidden files and folders are not unhidden. You can fix this problem with a registry hack:

1. Click Start > Run and type REGEDIT

2. Click the plus sign next to HKEY_CURRENT_USER
then SOFTWARE
then Microsoft
then Windows
then CurrentVersion
then Explorer
then Advanced

On the right side, double click the hidden value and give it a value of 1.

You should now be able to enable hidden files and folders.

Related Posts

111 Comments so far »

  1. by Jyoti, on December 7 2007 @ 12:18 pm

     

    I follow your suggestion and gave the hidden value of 1. But it doesn’t works. when i select show all files clicking on Folder Option>View then doesn’t work. Then i check the Hidden value of Registry and saw that Hidden value becames 2. Could you please give me a mail if you find any solutin for me.

    Regards
    Paul Jyoti

  2. by Huzefa, on December 9 2007 @ 12:03 am

     

    Hi i am facing the same problem. and i tried the same thing but the solution u have provided is temporary not permanent. as u the path u have given is current user so it is obvious that it is going to be temporary. i wanted a permanent solution through registry. pls provide me a solution if u can provide.

  3. by Sena, on December 10 2007 @ 9:50 pm

     

    my values keep on changing back to 2. How do i rectify this problem?

  4. by admin, on December 10 2007 @ 10:11 pm

     

    It sounds to me like some type of virus is going around. Try the steps at this link.

    http://technodigits.wordpress.com/2007/05/13/show-hidden-files-and-folders-not-working/

    Let me know your results. I’ll do more research for you all if you can’t get it to work.

  5. by manu, on December 27 2007 @ 9:49 am

     

    i’m havin the same problem da value keep changin to 2…help me out brother….thanks

  6. by Alaa, on January 2 2008 @ 8:19 am

     

    thanks, but i think that it doesn’t work with some people because they didn’t remove the virus first before running regedit

  7. by rajiv, on January 3 2008 @ 4:40 am

     

    sir,

    BEST WISHES FOR NEW YEAR 2008 TO YOU & YOUR TEAM.
    Iam never see my hidden files. in folder option i select show hidden files , after some time it also deselect, plz help me , what can i do?

  8. by admin, on January 3 2008 @ 4:54 am

     

    All of you that are having the problem where this value keeps changing need to read above. You have a virus on your system that is doing it. Get some new antivirus software and run a scan. I recommend AVG Antivirus.

  9. by vishal, on January 10 2008 @ 10:18 am

     

    i’m havin the same problem da value keep changin to 2…help me out brother….thanks

  10. by Blingg, on January 12 2008 @ 3:49 am

     

    Have removed all viruses, malware, etc… Surfed all over to changing the above reg value. Everyone is the same and have the same results where the hidden value changes back to 2. It must be something different.

  11. by sina, on January 12 2008 @ 11:40 pm

     

    hi all. I had the same problem. you should first be sure that the virus is disinfected. I suggest eset av 3. fater that you should change the value in the LOCAL_MACHINE not only CURRENT_USER: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
    Change the value of Checked Value to 1. It worked for me. let me know if it works for you or not. thx

  12. by satish, on January 13 2008 @ 5:47 am

     

    hi ,sina.thanx for ur suggestion.It worked for me.

  13. by dodda, on January 18 2008 @ 9:05 am

     

    really thanks sina for your great informations it really helped me a lot

  14. by Cristian, on January 18 2008 @ 9:34 am

     

    Great!! thank you so much… it worked for me as well

  15. by Nitin, on January 20 2008 @ 1:39 am

     

    same prob no solution…!!!!!!!!

  16. by Suma, on January 21 2008 @ 5:39 am

     

    I have same problem, cannot get the value “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL” change to stick??it reverts to 0.

  17. by sina, on January 22 2008 @ 3:14 am

     

    Hey suma. As I said before its reverting back generally means that Virus is active yet. Remember that the first step is inactiving the main virus file or it will monitor the changes in registry. Try a good AV to disinfect it first. you may try going to safe mode and disinfect the virus file. check Run keys in registry for anything suspesius. always autoarrange your system32 and windows folder in last modified. It enables you find the last problematic EXE or dll files there.I also suggest you to mark “Show hidden files and folders” and also unmark “Hide protected operating system files”.
    Any problem? Leave a comment and let me know it.

  18. by Bomman, on January 23 2008 @ 6:46 pm

     

    Hi, It’s working in my PC. Thanks…technipages

  19. by Mike, on January 25 2008 @ 2:35 pm

     

    I have the same issue as above, but when I change the regedit and then go to the folder option make the change there to show the hidden folder, I go back into it and it switches back to hidden.

  20. by mcjam10, on January 25 2008 @ 2:58 pm

     

    No matter what I do mine keep switching back to hidden, If I uncheck other options below that and hit ok, then close it and go back in everything goes back to hidden.

  21. by V Ravichandran, on January 25 2008 @ 11:38 pm

     

    Hi,
    It is not at all working.I strongly believe this is due to some virus. Further, I am not able to open any drives(i.e c: or D: drives) from Mycomputer. I am opening with explorer only. If anybody have fix for this,it would definitely be appreciated.

    Thanks & Regards,
    V Ravichandran

  22. by Unknown, on January 26 2008 @ 11:20 pm

     

    Wow Sina You Are Great. Many Thanks To You I’ve Been Wanting
    It For 1 Year . I am Refreshed .

  23. by Shicho, on January 28 2008 @ 1:07 pm

     

    Your a piece of gold, Sina.

    Finally all hidden files visible again - sigh!

  24. by shanmu, on January 28 2008 @ 9:33 pm

     

    I am not able to open any drives(i.e c: or D: drives) from Mycomputer. I am opening with explorer only. furthur i couldn’t view the hidden files…..please fix this problem….

  25. by VINEY, on January 28 2008 @ 11:28 pm

     

    THANX BRO,YOUR INFORMATION HELPED ME A LOT

  26. by sina, on January 29 2008 @ 9:25 pm

     

    hi folks. as i said before switching back (after making the suggested changes in HKLM and HKCU) means you are steal infected! the infected file has System and Hidden attributes, which makes it completely hidden to you. let’s try this one: (specially V Ravichandran!). open My computer. in the address bar type this:
    c:\Autorun.inf
    if a text file opens means you are infected. you could even see the main virus file name in the text. it means whenever you double clicked on a drive letter, the infected file will execute refering to the autorun file.
    you could clean this autorun and even the infected file. but guys! as i said THE FIRST STEP IS DISINFECTING VIRUS PROCESS! or they all will be switched back not only the show hidden file option.
    you could put the name of EXE file (in autorun.inf) here and maybe i could help more!

  27. by Swapnil Kamble, on January 30 2008 @ 10:37 am

     

    Sina suggestion worked for me. Thanks a lot SINA. You are a genius

  28. by ObSIDiaN, on January 30 2008 @ 3:55 pm

     

    Okay so if you have the virus I’ve been dealing with, and chances are you do, you can show the hidden files by changing this entry:

    +HKEY_LOCAL_MACHINE
    +SOFTWARE
    +Microsoft
    +Windows
    +CurrentVersion
    +Explorer
    +Advanced
    +Folder
    +Hidden
    NOHIDDEN

    In the NOHIDDEN folder, select CheckedValue and set to 1

    TADA!

    -ObSIDiaN

  29. by ObSIDiaN, on January 30 2008 @ 3:59 pm

     

    btw, my Autorun.inf folder contained this EXE file:

    8h3hh3m.exe

    This is the Kavo/Tavo/Taso worm/trojan/virus and IT IS A BIIIIITCH TO REMOVE!

  30. by ObSIDiaN, on January 30 2008 @ 4:00 pm

     

    btw, my Autorun.inf file was running this exe file:

    8h3hh3m.exe

    This is the Kavo/Taso/Tavo worm/trojan/virus

    Its a viscous one!

  31. by ashok, on January 30 2008 @ 11:17 pm

     

    i am using winxp2 ,in my pc hidden folders option is not working being the suggestions in the goggle i changed the hidden value as 1 but it is not changing the value when i am changing the value from 2 to 1 it is again showing the values as 2 and also i am having a virus called silty.wdc i am trying allot but is not removed please help me, if any one can send me a mail,
    my mail id : veenapapumailbox@yahoo.co.in

  32. by abhi, on January 31 2008 @ 2:12 am

     

    hi,

    I have followed all above solutions and change the values of registry but it can not work for me .I have also tried RRT and other software but it can’t work also.I used symantec antivirus 10 but after all I am suffering.plz halp me…

  33. by Sina, on January 31 2008 @ 3:57 am

     

    ObSIDiaN and the others! I am not there on your PC and could not help from here. But another usefull suggestion:
    now you know the name of virus file. its great. ok, but its completely hidden. you know its path. e.g c:\8h3hh3m.exe or something. go to the run or command prompt and type:
    attrib c:\8h3hh3m.exe -h -s
    bingo! you could see it now. But now what? go to virustotal[dot]com and send the file. it will scan it for you with some AVs. now you even know which AV could clean it. ok. why are you still waiting? go ahead! I hope u success!

  34. by Sridhra, on January 31 2008 @ 10:45 am

     

    Hey, thanks much the above solution helped alot

    sridhar Pasupuleti

  35. by senthilkannan, on January 31 2008 @ 9:44 pm

     

    hi sina,
    the one u suggested at no 12…
    it worked for me… thanku very much…

  36. by Suma, on February 1 2008 @ 1:58 am

     

    Thanx Sina,
    Used the MS Malicious SW removal tool (full scan) and I now managed to edit the registry so everything back to normal. However still have autorun.inf popping up with Avast but it cannot delete, gives an error of “cannot process - file not packed”. yet to try boot time scan and will let you know…

  37. by sina, on February 1 2008 @ 8:38 pm

     

    Dear Suma. the autorun.inf file is in the root of each partition. try deleting them from all drives in safe mode. I mean in safe mode -> run->del [c:]\autorun.inf and do it for the other partitions. but a good AV should be able to remove it as well. if u couldn’t remove it in safe mode so the virus is running as a service. try removing its content. open it and delete all texts inside.
    But I notes that “if virus is completely disinfected usually autorun file should be deletable and if its still locked try scanning ur pc using another AV!”

  38. by muhammad adil, on February 2 2008 @ 1:15 am

     

    it doesn’t works it shows a message that the specified path does not exist.
    can u help me through mail

  39. by JAY, on February 2 2008 @ 5:22 am

     

    my search option is not wroking and my pc doesnt show hidden files and folders

  40. by Armine, on February 2 2008 @ 12:16 pm

     

    Dear Sina,
    Thanks a lot for helping, more then few days i was suffering with this problem, and thanks for you i solved this, and even more, i advised my friends to use this web site in case if will have any technical problem…
    best regard

  41. by sina, on February 2 2008 @ 10:56 pm

     

    @mohammad adil
    not all viruses have an autorun in each drive. if u have a problem explain it here.
    @Jay
    Read the previous posts. what u mean? ur search doesn’t work at all? or malfunctioning? e.g it only searchs an special folder, or doesn’t search system folders. There are some options in search window>all files and folders>more advanced options which are controlled throug HKCU\software\microsoft\windows\currectversion\explorer
    look at SearchHidden and SearchSystemDirs for example.
    &@Armine, Thanks dear. Khosh bashi ;)

  42. by sharath, on February 3 2008 @ 1:14 am

     

    hi i did my value changed to 2 then i did it again it works for me.

  43. by Suma, on February 3 2008 @ 2:42 am

     

    Dear Sina,
    Problem seems sorted by searching registry for all occurences of avmo.exe and deleting (it was in system 32 folder too) as well as “d.com”. Avast didnt get them…
    Thanx.

  44. by szereshki, on February 3 2008 @ 2:50 am

     

    yes. infact amvo.exe and amva key in the registry. its not an easy to clean virus.

  45. by Armine, on February 3 2008 @ 8:59 am

     

    Dear Sina,
    i am useing antivirus Kaspersky and soon the limit of key will expire, help me please to get a new key in net, if its possible how to search in net.. or if there is a way to make this valid key prolong how to do it.
    best regard

  46. by szereshki, on February 3 2008 @ 10:02 pm

     

    Kaspersky is a good AV. But i don’t use it for this limitations. usually an updated A grade AV is enough and I don’t say which one is better. I am using ESET AV 3 cuz I could update it and it works. It has so more medals and honors and … (but infact I fill it sometimes is slower than kasper in detecting new threats!)sorry armine. I couldnt help u. but try googling. I beleave google knows more than god! you could find the answer there.

    p.s. @45: sorry I mean it IS an easy to clean one!

  47. by V Ravichandran, on February 6 2008 @ 7:42 pm

     

    Dear Sina,
    As you said, autorun.inf is opening with virus name.We even got a solution from McAfee to open blank autorun.inf in C: drive. But it is not allowing to save this blank file. Virus is completely disinfected.The lateset dat&engine version of Mcafee is capable to clean/delete this.But the damage is stil not rectified.If you get a fix please inform me. Thanks for your quick response.

    Regards,
    V Ravichandran

  48. by V Ravichandran, on February 6 2008 @ 7:58 pm

     

    Hi,
    Further in c:\autorun.inf which is a hidden file, some entries are there. At the end of each line open=xn1i9x.com is there. I am unable to rename or delete anything from this file. But I am sure that virus is totally disinfected. Post your suggestions to my e-mail (ravichandran.venugopal@gmail.,com) also.

    Thanks & Regards,
    V Ravichandran

  49. by V Ravichandran, on February 7 2008 @ 2:47 am

     

    Hi All,
    I have removed autorun.inf by attrib autorun.inf -s -h -r and del autorun.inf.Then I opened blank autorun.inf in c: drive.So I can open my drives in My computer. Now the challenge is to check show hidden files and folders in folder options in tools menu.Registry settings are not useful.

    Warm Regards,
    V Ravichandran

  50. by szereshki, on February 7 2008 @ 3:33 am

     

    Are you sure? check again both HKLM and HKCU registry imports.

  51. by szereshki, on February 7 2008 @ 3:39 am

     

    Are u sure? Check again both HKLM and HKCU registry imports.

  52. by szereshki, on February 7 2008 @ 11:22 pm

     

    How you are sure your system is disinfected? Opening a blank Autorun.inf doesn’t solve the problem and is a temporary solution. Because the main virus threat is still alive. Some AVs doesn’t clean the virus completely, but just some of its secondary files. Try unhiddening xn1i9x.com using “attrib c:\xn1i9x.com –h –s –r”. Is still there? So still infected.
    Another tip: Use “attrib c:\autorun.inf –h –s –r”. Install Unlocker (a free useful program). Right click on autorun.inf->Unlocker. See which process is locking it.
    I am not sure that virus is totally disinfected!

  53. by V Ravichandran, on February 10 2008 @ 12:13 am

     

    Hi,
    Again I made McAfee on demand scan.Nothing was found. Also xn1i9x.com is not there.HKLM&HKCU editing didn’t help out.I have not tried with Unlocker.I’ll try.

    Thanks&Regards,
    V Ravichandran

  54. by firas, on February 13 2008 @ 2:30 am

     

    It worked thanks a lot

  55. by Steve, on February 22 2008 @ 10:21 am

     

    Friends here is the complete solution for hidden file and amvo.exe file:

    first of all download the BulletProof FTP Client for Windows software from the http://www.bpftp.com/ and then run it it will show you ur all hidden files.

    Then after u will explore them by right click view explorer then u found the all amvo.exe,amvo.dll,amvo0.dll,amvo1.dll,etc.
    some file also remove from that software but some r not.
    So open in safe mode and again choose view explorer from that software.
    Now u can show that all file into c:\windows\system32\

    Delete all that files.
    and restart ur computer.

    still u can’t then in bpft software u can edit amvo.dll file by changing its content or by removing all data and rename that file. and again open in safe mode and delete all the file.

    Now hidden file problem

    1.Click Start > Run and type REGEDIT

    2. Click the plus sign next to HKEY_CURRENT_USER
    then SOFTWARE
    then Microsoft
    then Windows
    then CurrentVersion
    then Explorer
    then Advanced

    On the right side, double click the hidden value and give it a value of 1.

    3.same for HKEY_LOCAL_MACHINE
    then SOFTWARE
    then Microsoft
    then Windows
    then CurrentVersion
    then Explorer
    then Advanced
    then Folder
    then Hidden
    then SHOW ALL

    Change the value of Checked Value to 1.

    Its really works for me
    Now i’ve no problem of hidden file.

  56. by abhi, on February 25 2008 @ 12:33 pm

     

    hi guys,got the same problem and hi sina some text file is opening when i run c\autorun.inf. i m having norton antivirus with updated definations but still no viruses are detected.can anyone tell me which antivirus to use for detecting such registry infecting viruses.which AV is best norton\mc afee\AVG???

  57. by szereshki, on February 25 2008 @ 11:17 pm

     

    hi abhi
    look at inside the autorun file. you should see some executable file name, e.g. open=sys.exe. this file is the infected file. but you could not disinfect your system if you are not a professional in this work. using a good updated AV is recomended. as I know norton (symantec) AV is better than the two others. If it doesnt help, try using nod32, kaspersky or antivir. If you put the name of infected executable here I may help you more. (I am using eset av3 having no problem)
    sina

  58. by abhi, on February 26 2008 @ 12:31 pm

     

    hi sina
    deleted the amvo files through dos mode and did all those jobs.nw the hidden options is working properly.THANKS.
    hey buddy can u tel me how to delete norton 2003 completely(i.e. no files remain on the hard disk to be detected when i can reinstall it again with a subscription period of 1year).i think with an updated virus definations any norton version wud do,isn’t it???who is going to buy a new one!

  59. by szereshki, on February 27 2008 @ 12:55 am

     

    hi abhi
    did u mean you want NAV2003 to be uninstalled so that its setup does not detect a previous subscription? Its a complex and software-depended task and I could not help you. but how about installing a new version? If you want to use NAV legally, you dont need a complete uninstallation, and if ilegally, use the last version then. or you may shift to another AV.
    sina

  60. by abhi, on February 27 2008 @ 10:21 am

     

    hi sina
    i have uninstalled each component of norton from add\remove program then manually and even from regedit. so it doesnt detect that it was loaded earlier. so now when i loaded it my subsciption got extended from yesterday till one year. GREAT NAA!!!

  61. by shane (frm Jamaica), on March 4 2008 @ 1:12 pm

     

    Sina…..all i can say is ALL HAIL you
    your suggestion worked like a charm…

  62. by Kk, on March 6 2008 @ 10:34 am

     

    Hi, is it possible to remove the those problems by reformat the system? Thank you.

  63. by szereshki, on March 8 2008 @ 10:14 pm

     

    Yes. these problems are almost in windows registry and system and could be removed formating the system.

  64. by anonym, on March 12 2008 @ 5:44 pm

     

    thanks, “sina”, your comment was really efficient to me.

  65. by krishh, on March 14 2008 @ 2:40 am

     

    hi
    my problem about hidden files and folders is not solved yet.
    by this method hidden files are appear but they are again hidden and then not appear even after selecting ’show hidden files and folder’.
    please help me
    send the solution on my e mail id.
    thanks

  66. by Deepak GoYL, on March 15 2008 @ 5:51 am

     

    hay Sina …
    pleasure saying it do worked……….
    giving so much rollercoaster to me in these days…now its workin
    thanks again:-)

  67. by ALPESH, on March 18 2008 @ 3:39 am

     

    hi 2 all.
    i did all above said, but stil the problem is unsolved.
    i can’t see hiden files. i have also used many AV.also.
    pls HELP ME DEARS.

  68. by andy, on March 18 2008 @ 12:28 pm

     

    !!! IF THE VALUE CHANGES BACK AND YOU STILL CAN’T SEE THE HIDDEN FILES..

    http://4paisa.blogspot.com/2008/02/cleaned-amvoexe-virus-manually.html

    Do what it says there to get rid of the virus, then use the above solution with regedit, the LOCAL MACHINE one. The Current_User one didn’t work for me, the Local_Machine did.

  69. by Ram, on March 18 2008 @ 11:43 pm

     

    This really worked

    Make sure the virus is disinfected. Then open your regedit from the windows folder in your system drive and follow this path:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
    Change the value of CheckedValue to 1.
    This should do the trick. :)

    you can also open regedit using the run command in the start menu. just type regedit in run and hit the enter key or click on ok.

  70. by manojavam, on March 19 2008 @ 1:00 am

     

    hi all i want to register to this website because it is so helpful and i am in need of help. please suggest me how to become a member of it

  71. by Rahul, on March 19 2008 @ 10:16 am

     

    thanks a lot i was able 2 remove d file amvo.exe using safe mode
    thank u all d people helped.

  72. by prashant, on March 20 2008 @ 10:09 am

     

    hey am not able to open the registry editor by typing regedit please help

  73. by ALPESH, on March 22 2008 @ 11:22 pm

     

    hi dear all.
    i was suffering the same problem,and tried the all things that a user can.
    i clear the same hidden files problem. wih AVAST 4.0 AV.

    AND COME BACK TO NORMAL MODE.
    u can also find the AV to :
    http://www.avast.com/eng/download-avast-professional.html
    .

    just down load the files of 19 MB.
    . run it, allow to restart the system
    .note that AVAST will check the computer in the SATRT UP MODE.
    allow to check it.

    select 2 ( delete all= option.)

    now do following:
    . Click Start > Run and type REGEDIT

    2. Click the plus sign next to HKEY_CURRENT_USER
    then SOFTWARE
    then Microsoft
    then Windows
    then CurrentVersion
    then Explorer
    then Advanced
    On the right side, double click the hidden value and give it a value of 1.

    You should now be able to enable hidden files and folders.

    then the same tihings DO in HKEY_LOCAL_USER.

    pc is cleannn !!!
    Now what u r waiting for, Just GO Ahead!!!
    rgards,

    Alpesh

  74. by NIKITA SHAH, on March 22 2008 @ 11:27 pm

     

    WOW

    alpesh bhai U R GEAT !!!
    THANKSS A LOTT.
    UR KEY WORKS..!
    THAT U MUST WISH FROM ME.

    REGARDS
    Nikita

  75. by sachin, on March 23 2008 @ 12:11 am

     

    i m heartly thankful to u SINA ur suggestion on local machine worked 4 me………

  76. by akash, on March 27 2008 @ 1:44 pm

     

    hi sina ur just great. the solution u have given to show the hidden files really worked for me thanks.

  77. by sahil, on March 28 2008 @ 8:40 am

     

    hi sina
    i went to safe mode and open regedit and followed the steps for HKEY_CURRENT_USER and HKEY_LOCAL_USER. to change the value, but still, show the hidden file and folder option is not working. i tried nod32 and antivir antivirus but nothing happened and i am still unable to manage this stuff.
    can u help me out of this
    thanks

  78. by cLAUDE, on March 30 2008 @ 5:26 am

     

    HI SINA. iT WORKED FOR ME. THANX BUDDY

  79. by byteslash, on April 4 2008 @ 1:39 am

     

    hey sina, thank u very much. u saved me a lotta time.
    keep it real

  80. by yogin, on April 4 2008 @ 4:00 am

     

    hey alpesh thanks for solution it really worked.

  81. by szereshki, on April 4 2008 @ 10:11 pm

     

    Thx everybuddy.
    @Sahil: If you checked your system with an updated AV and found nothing there should be some possibilities: a new Virus!? which is still active on your system, or you didn’t perform all the steps we said before precisely.
    Sina

  82. by szereshki, on April 6 2008 @ 12:49 am

     

    Alert! new virus which nod32, symantec, … does not find it yet. it disables yahoo messenger and changes show hidden files as above. it sets an autorun on flash disks and other drives and its exe file is m9j.com (on my system at least)
    Sina

  83. by carlo, on April 6 2008 @ 10:02 am

     

    hi sina..
    i’m from the philippines..
    i just reformat my computer and within just a few hours, i already had many viruses and spywares.. i even experienced the same problem.. and i tried your solution on number 11 and it worked really great for me.. thankyou very much.. sorry for that long story i was just happy that my computer was fixed.. but not completely fixed..
    i still experience a virus or some kind of spyware..
    i think the infected file is sality.k… something like that, can you help me fix this problem… tnx..

  84. by szereshki, on April 7 2008 @ 2:47 am

     

    Hi Carlo. If yoy or the others want to reformat and reinstall windows, please take these notes:
    1- You usually format windows drive. Its ok, but note that many viruses puts an autorun.inf and an infected file in the root of each drive. I mean if you click on any of the other partitions you will be infected.
    Solution: goto folder options and enable showing hidden an protected system files. Goto each of your partitions BY TYPING ITS LETTER IN ADDRESS BAR (e.g D: ) and delete autorun.inf and infected exe (or com or …) file. The name of this file is presented inside the autorun file.
    2-The first step after installing windows even before updating drivers, is to install an updated antivirus.
    Remember that an infected and cleaned system is like a repaired instrument and could not be as the original one. Therefore, try preventing your system from being infected not just clening it after infection.
    I recommend you Carlo to reinstall windows again now at the beginning.
    And about the new virus. It sounds to be a new amvo. I submitted its files (amvo.exe, amvo0.dll, autorun.inf, m9j.com,…) and the new signature database of NOD32 (3006) knows it. It made the same problem of the topic to my pc. I could restore the superhidden defaults. But, show hidden files doesn’t work! I’m working on it and will tell you the solution
    Sina

  85. by szereshki, on April 7 2008 @ 3:07 am

     

    OK. after a restart all things look well.
    reminding: HKLM->
    SupperHidden:
    CheckedValue: 0
    DefaultValue: 0
    UnCheckedValue: 1
    Hidden:
    NONHIDDEN
    CheckedValue: 2
    DefaultValue: 2
    SHOWALL
    CheckedValue: 1
    DefaultValue: 0

  86. by genex3m, on April 8 2008 @ 1:11 am

     

    Long comment moved to the forum. Step by step instructions.
    http://forum.technipages.com/index.php?topic=12.0

  87. by darkness, on April 8 2008 @ 9:58 pm

     

    Thanks for the help and the solution given on this page worked for me.

  88. by erin, on April 9 2008 @ 9:34 am

     

    hi sina! i’m erin, and i have this problem. my eset smart security found 5 viruses and wasnt able to clean it up. so i tried to delete them in the said destination but then i found out that they are hidden files. and yeah, the “show hidden files button’ wasnt working. so what do i do?

    This are the viruses that eset gave me… it’s killing me!

    C:\l2quk.exe - Win32/Pacex.Gen virus - unable to clean
    C:\Documents and Settings\Irene\Local Settings\Temp\lh4yhy4.dll - Win32/Pacex.Gen virus - unable to clean
    C:\WINDOWS\system32\fool0.dll - Win32/Pacex.Gen virus - unable to clean
    C:\WINDOWS\system32\ieso0.dll - Win32/Pacex.Gen virus - unable to clean
    C:\WINDOWS\system32\kxvo.exe - Win32/Pacex.Gen virus - unable to clean

    thanks!:)

  89. by erin, on April 9 2008 @ 10:21 am

     

    sina. please help. will wait patiently for your reply.:)

  90. by szereshki, on April 10 2008 @ 12:54 am

     

    Hi Erin. Are you sure it doesn’t clean them? All AVs could clean detected viruses in some way (Cleaning, deleting, or quarantining viruses or in the case that virus is active and locked, cleaning it on next boot.). So its most likely not to be any virus files there (rescan after next reboot to make sure). But the general solution is using attrib dos command to unhide them:
    Attrib C:\WINDOWS\system32\kxvo.exe -h –s to unhide kxvo.exe
    If its locked, try Unlocker (free software) to unlock it and delete it.
    Let me know the result
    thx

  91. by Saad, on April 10 2008 @ 12:58 am

     

    hy sina… thnx alt.. wrkin well n gud fr me :)

  92. by szereshki, on April 10 2008 @ 2:54 am

     

    Hi Erin. Are you sure it doesn’t clean them? All AVs could clean detected viruses in some way (Cleaning, deleting, or quarantining viruses or in the case that virus is active and locked, cleaning it on next boot.). So its most likely not to be any virus files there (rescan after next reboot to make sure). But the general solution is using attrib dos command to unhide them:
    Attrib C:\WINDOWS\system32\kxvo.exe -h -s to unhide kxvo.exe
    If its locked, try Unlocker (free software) to unlock it and delete it.
    Let me know the result
    thx
    Sina

  93. by Alley, on April 10 2008 @ 1:48 pm

     

    Hi i tried the steps and it worked out. Ands for all buddies for posting the solution..

  94. by Reetesh, on April 13 2008 @ 2:17 am

     

    Sina, your suggestion worked. Absolutely perfect. Thanks

  95. by maestro, on April 13 2008 @ 7:24 am

     

    wow! thankx genex3m, ur guide worked for me great apart from all others which solved ma problem partially. anyways thankx all

  96. by vikendra singh rathore, on April 15 2008 @ 11:06 pm

     

    i am using winxp2 ,in my pc hidden folders option is not working being the suggestions in the goggle i changed the hidden value as 1 but it is not changing the value when i am changing the value from 2 to 1 it is again showing the values as 2 and also i am having a virus called silty.wdc i am trying allot but is not removed please help me, if any one can send me a mail,
    my mail id vikku_rathore_143@yahoo.com

  97. by Gauraw, on April 16 2008 @ 1:38 am

     

    Thanks, it works after i follow the above steps but it never show “Folder options” in View tab. why?

  98. by karan khatri, on April 16 2008 @ 9:00 pm

     

    thanx a lot man.
    u solved a big problem of mine.
    u rock man…!!!!!

  99. by szereshki, on April 19 2008 @ 7:23 am

     

    hi all!
    @vikendra: after removing your virus with ANY updated AV–>Post No.85
    @Gauraw: you could enable it again (after cleaning your system using group policy editor. Type gpedit.msc in run: user config.>admin. templates>win. components>win. explorer:
    double click “Remove the folder options menu…” and disable it. after a restart (if no virus) it will be back.
    Sina

  100. by rkmarasini, on April 21 2008 @ 6:32 am

     

    thanks done

  101. by Javad Rezvani, on April 21 2008 @ 11:17 pm

     

    Hello every one
    Yes,same as my friends say for this problem you must first remove virus from computer(I suggest nod32!) and then follow this root in registry:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    and then change value of hidden from 0 to 1
    be success :-) :xxx

  102. by vanji, on April 22 2008 @ 5:22 am

     

    Nice info.. thanks all :-)

  103. by Dhairya, on May 21 2008 @ 9:06 pm

     

    thanks all :) :)

  104. by syed azeez, on May 23 2008 @ 2:38 am

     

    HI all

    I tried with the attrib command in safemode to delete the kavo and tavo,then edited the checked value 1 in regedit and then delete the both file in windows\system32 and also cleared the registry entries..
    checked working fine..
    Thanks a lot for who give idea to delete the file…

    Syed Azeez.u
    syedcrown@gmail.com

  105. by Dane, on June 8 2008 @ 6:24 pm

     

    hey thnx Suma…Your solution worked like a charm…Bless!!!

  106. by Rahul, on June 9 2008 @ 3:16 am

     

    comment marked 55 really works people the one which is by Steve, on February 22 2008 @ 10:21 am!!

    thanks steve .. thanks a lot man!!

  107. by lucky, on June 22 2008 @ 10:18 am

     

    thank you so much
    it works.
    tnx again dude

  108. by Jack, on June 25 2008 @ 3:34 am

     

    thx ur teach ! how to learn the thing at regedit ! got anything can i learn by myself with windonws xp high setting !

  109. by kash, on August 5 2008 @ 1:10 am

     

    Hi friend ,

    Thanks,Now its working.

  110. by Crawler, on August 14 2008 @ 4:14 am

     

    I tried all the steps. It was working fine. When i restarted my pc the thing was back on. I have scanned my pc with latest av and it doesnt detect anything. Any idea what could be the problem.
    Also, in the autorun.inf file there is some filename with extension .com and not .exe. is that normal or its some other variant of the virus.

  111. by Rania, on August 18 2008 @ 10:53 am

     

    Well i have a similar problem, I can show hidden files, but the thing is , the AVG scan results shows infected files under a path that doesn’t exist not even in the hidden files!!
    Does anyone have an idea of the reason for this ?
    Thanks in advance

Comment RSS · TrackBack URI

Leave a comment

Name: (Required)

eMail: (Required)

Website:

Comment: