MalwareTeks: How to View System and Hidden Files and Folders in Windows

Table of Contents

1 Introduction
2 Show Hidden Files and Folders

2.1 Windows 95
2.2 Windows 98
2.3 Windows ME
2.4 Windows NT
2.5 Windows 2000
2.6 Windows XP
2.7 Windows Server 2003
2.8 Windows Vista
2.9 Windows Server 2008
2.10 Windows 7

3 Using a Windows Registry Patch

Introduction

By default Windows prevents certain files and folders from being viewed. This is to protect these files and folders, from being inadvertantly modified or deleted. Unfortunately some forms of malware can hide their files and folders, making it harder to find the malcious items.

By following the steps listed below, for your version of Windows, you will be able to configure Windows to show all files, file extensions, and folders.

INFORMATION

Under normal operating conditions you should leave the viewing of files and folders at the default settings. You should only enable the viewing of hidden and system files and folders and file extenstions only when troubleshooting your operating system.

Show Hidden Files and Folders

Windows 95

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Click OK.

Windows 98

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Click OK.

Windows ME

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click OK.

Windows NT

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Click OK.

Windows 2000

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

Windows XP

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

Windows Server 2003

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

Windows Vista

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

Windows Server 2008

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

Windows 7

Close all programs and windows that you have open.
Right-Click Start.
Select Explore.
Select the Tools menu and click Folder Options.
Select the View Tab.
In Advanced Settings:, under Hidden files section select Show all files.
Uncheck Hide extensions for known file types.
Uncheck Hide protected operating system files (recommended).
Click Yes.
Click Apply.
Click OK.

NOTE

While accessing some Windows folders you may have to click on an underlined link to view the files and sub-folders for that particular Windows folder:

View the Entire contents of this drive

Using a Windows Registry Patch

Windows 95/98/ME/NT

Copy the contents of the below quote box to Notepad; Save As UnHideFiles.reg to your Desktop; make sure File Type: is set to All Files (*.*). Close Notepad.

Locate UnHideFiles.reg on your Desktop. Double-click on it and answer 'Yes' when asked if you want to merge with the registry.

UnHideFiles.reg

REGEDIT4
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"SuperHidden"=dword:00000001
"ShowSuperHidden"=dword:00000001

To Undo:
Copy the contents of the below quote box to Notepad; Save As HideFiles.reg to your Desktop; make sure File Type: is set to All Files (*.*). Close Notepad.

Locate HideFiles.reg on your Desktop. Double-click on it and answer 'Yes' when asked if you want to merge with the registry.

HideFiles.reg

REGEDIT4
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000002
"HideFileExt"=dword:00000001
"SuperHidden"=dword:00000000
"ShowSuperHidden"=dword:00000000

Windows 2000/XP/2003/VISTA/2008/7

UnHideFiles.reg

Windows Registry Editor Version 5.00
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"SuperHidden"=dword:00000001
"ShowSuperHidden"=dword:00000001

HideFiles.reg

Windows Registry Editor Version 5.00
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000002
"HideFileExt"=dword:00000001
"SuperHidden"=dword:00000000
"ShowSuperHidden"=dword:00000000

CAUTION

Because of a bug, even after following the above procedures, some file extensions will not be displayed. There are some forms of malware that will take adavantage of this bug. Files with the extensions of .lnk, .pif, and .shs will not display properly under certain conditions.

Some examples are as follows:

somefile.txt.shs will look like somefile.txt. Double clicking on the file will cause it to execute, instead of opening with notepad.
somefile.zip.pif will look like somefile.zip. Double clicking on the file will cause it to execute, instead of opening WinZip (or similar).
musicfile.mp3.lnk will look like musicfile.mp3. Double clicking on the file will cause it to execute, instead of opening with Windows Media Player (or similar).

Those are just a few examples. There are many more. This is very dangerous and double clicking these type of files will cause them to execute, infecting the computer.

You may not reproduce this article in whole or part without the express permission of the author and MalwareTeks.