{"id":22,"date":"2008-01-29T01:23:45","date_gmt":"2008-01-28T19:23:45","guid":{"rendered":"http:\/\/hasibul.info\/blog\/?p=22"},"modified":"2008-01-29T01:23:45","modified_gmt":"2008-01-28T19:23:45","slug":"problem-with-show-hidden-files-folders-in-windows-folder-option-worm_autorunrw","status":"publish","type":"post","link":"https:\/\/hasibul.info\/blog\/2008\/01\/29\/problem-with-show-hidden-files-folders-in-windows-folder-option-worm_autorunrw\/","title":{"rendered":"Problem with “Show Hidden Files & Folders” in windows Folder Option – WORM_AUTORUN.RW"},"content":{"rendered":"

I encountered a very tricky problem with hidden files and the option in the “Folder Option” menu in Windows. A virus spreaded from and external pen drive and ultimately slowed down the windows so much and at a certain point the windows wasn’t even starting and eventually I had to reinstall the Windows. But the problem wasn’t over even after reinstalling the windows. Another symptom was that when I double clicked on any of the Drives a new window opened everytime, and later on double clicking was’t working at all. <\/strong>I had to navigate through the browser. Later I had to follow a set of instruction to get rid of this problem:<\/p>\n

PART: A (Removing the Virus\/worm\/trojan)\u00c2\u00a0<\/strong><\/p>\n

1.<\/strong> Install AVG antivirus solution and update it.<\/p>\n

2.<\/strong> I\u00c2\u00a0 had NC (Norton commander<\/strong>)a very old dos based explorer, . I opened NC from the command prompt, and through it I could browse through my drives and could see what damages the virus did. There was a file named u.bat<\/strong>\u00c2\u00a0 and also autorun.ini<\/strong> in all my drives. I deleted those. Then I made sure that the file named amvo.exe<\/strong> (C:\\windows\\system32\\amvo.exe<\/strong>) was deleted (stop it from the taskbar if it is running in the process tree). Then I deleted almost all the files in the “system volume information” folder (restore point files). Remember, I used NC to do the above jobs as the files I mentioned above were in hidden format and wasn’t visible through normal explorer. But through NC you can browse and delete these.<\/p>\n

The above method worked in my case, but cannot be guaranteed in all the cases.<\/p>\n

PART: B (Fixing “Show Hidden Files & Folder” problem)<\/strong><\/p>\n

Go to the following registry key<\/strong>: (go to Start >> Run >> type “regedit” and then press “ok”)
\nHKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Folder\\Hidden\\SHOWALL<\/p>\n

DELETE the value CheckedValue in the right window. (Its type should be REG_SZ and data should be 2.)<\/p>\n

Now create a new DWORD value called CheckedValue (same as above, except that the type is REG_DWORD). Modify the value data to 1 (0x00000001).<\/p>\n

This should let you change the “Show Hidden Files and Folders<\/strong>” option now.<\/p>\n

Be safe, be careful, use protections, ensure prevention and avoid cure hassles. \ud83d\ude09 \ud83d\ude09<\/p>\n

\u00c2\u00a0<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

I encountered a very tricky problem with hidden files and the option in the \"Folder Option\" menu in Windows. A virus spreaded from and external pen drive and ultimately slowed down the windows so much and at a certain point the windows wasn't even starting and eventually I had to reinstall the Windows. But the…<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6,12],"tags":[],"how-to":[],"_links":{"self":[{"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/posts\/22"}],"collection":[{"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/comments?post=22"}],"version-history":[{"count":0,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/posts\/22\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/media?parent=22"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/categories?post=22"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/tags?post=22"},{"taxonomy":"how-to","embeddable":true,"href":"https:\/\/hasibul.info\/blog\/wp-json\/wp\/v2\/how-to?post=22"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}