Windows 95/98 forum: HELP with hidden directories

There are several directories on my hard drive that are hidden, placed there by spyware. How can I make them VISIBLE in explorer, or in DOS? I've tried going to dos and setting the file attributes to -h, to no avail. Here are my registry keys for the explorer hidden attributes - please advise if they need to be changed. thank you:

1. You'll find my answer below for each registry key.

2. My question would be "What spyware supposedly put something somewhere on your system and how do you know this?" There is only one section below which is not on my Win98FE system and I do not know what it could be -- valid or bogus.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced]

NO.

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder]
"Type"="group"
"Text"="Files and Folders"
"Bitmap"="C:\\WINDOWS\\SYSTEM\\SHDOC401.DLL,4"
"HelpID"="update.hlp#51140"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden]
"Text"="Hidden files"
"Type"="group"
"Bitmap"="C:\\WINDOWS\\SYSTEM\\SHDOC401.DLL,4"
"HelpID"="update.hlp#51131"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="Show all files"
"Type"="radio"
"CheckedValue"=dword:00000001
"ValueName"="Hidden"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="update.hlp#51105"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\NOHIDDEN]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="Do not show hidden files"
"Type"="radio"
"CheckedValue"=dword:00000002
"ValueName"="Hidden"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="update.hlp#51104"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\NOHIDORSYS]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="Do not show hidden or system files"
"Type"="radio"
"CheckedValue"=dword:00000000
"ValueName"="Hidden"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="update.hlp#51103"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\DontPrettyPath]
"Type"="checkbox"
"Text"="Allow all uppercase names"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="DontPrettyPath"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="update.hlp#51072"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\ShowInfoTip]
"Type"="checkbox"
"Text"="Show pop-up description for folder and desktop items."
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ShowInfoTip"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="update.hlp#51102"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\ShowAttribCol]
"Type"="checkbox"
"Text"="Show file attributes in Detail View"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ShowAttribCol"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="update.hlp#51071"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\MapNetDrvBtn]
"Type"="checkbox"
"Text"="Show Map Network Drive button in toolbar"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="MapNetDrvBtn"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="update.hlp#51070"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\HideFileExt]
"Type"="checkbox"
"Text"="Hide file extensions for known file types"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="HideFileExt"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="update.hlp#51101"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\ShowFullPath]
"Type"="checkbox"
"Text"="Display the full path in title bar"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CabinetState"
"ValueName"="FullPath"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="update.hlp#51100"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\ClassicViewState]
"Type"="checkbox"
"Text"="Remember each folder's view settings"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ClassicViewState"
"CheckedValue"=dword:00000000
"UncheckedValue"=dword:00000001
"DefaultValue"=dword:00000000
"HelpID"="update.hlp#51076"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Thickets]
"Text"="Managing pairs of Web pages and folders"
"Type"="group"
"Bitmap"="C:\\WINDOWS\\SYSTEM\\\\SHELL32.DLL,4"
"HelpID"="TBD"

MY SYSTEM DOES NOT HAVE THIS KEY

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Thickets\AUTO]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer"
"Text"="Show and manage the pair as a single file"
"Type"="radio"
"CheckedValue"=dword:00000000
"ValueName"="NoFileFolderConnection"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="TBD"

MY SYSTEM DOES NOT HAVE THIS KEY

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Thickets\NONE]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer"
"Text"="Show both parts and manage them individually"
"Type"="radio"
"CheckedValue"=dword:00000001
"ValueName"="NoFileFolderConnection"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="TBD"

MY SYSTEM DOES NOT HAVE THIS KEY

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Thickets\NOHIDE]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer"
"Text"="Show both parts but manage as a single file"
"Type"="radio"
"CheckedValue"=dword:00000002
"ValueName"="NoFileFolderConnection"
"DefaultValue"=dword:00000000
"HKeyRoot"=dword:80000001
"HelpID"="TBD"

MY SYSTEM DOES NOT HAVE THIS KEY

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Visual]
"Type"="group"
"Text"="Visual Settings"
"Bitmap"="C:\\WINDOWS\\SYSTEM\\SHDOC401.DLL,6"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Visual\DragFullWin]
"Type"="checkbox"
"Text"="Show window contents while dragging"
"HKeyRoot"=dword:80000001
"RegPath"="Control Panel\\Desktop"
"ValueName"="DragFullWindows"
"CheckedValue"="1"
"UncheckedValue"="0"
"DefaultValue"="1"
"SPIAction"=dword:00000025
"HelpID"="update.hlp#51074"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Visual\FontSmooth]
"Type"="checkbox"
"Text"="Smooth edges of screen fonts"
"HKeyRoot"=dword:80000001
"RegPath"="Control Panel\\Desktop"
"ValueName"="FontSmoothing"
"CheckedValueNT"="2"
"CheckedValueW95"="1"
"UncheckedValue"="0"
"DefaultValue"="0"
"SPIAction"=dword:0000004b
"SPIParamON"=dword:00000002
"HelpID"="update.hlp#51073"

NO

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Visual\HideIcons]
"Type"="checkbox"
"Text"="Hide icons when desktop is viewed as Web page"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="HideIcons"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"="0"
"HelpID"="update.hlp#51106"

NO

1) Is there anything I can change in registry so that all the HIDDEN and SUPERHIDDEN stuff on my drive will be visible and easily manageable?

None that I'm aware of. Consider that your system scan supposedly identified something hidden, I'm sure a malware itself would circumvent the system itself from denying the hide taking place when it's installed and a subsequent manual change would be required to unhide such by removing the attributes.

2) Is it possible there are hidden registry entries as well, and how would I SEE them?

I have not tripped across anything which state that items could be hidden from a user in the Win9x registry. I would simply suggest that you use a program such as "EasyCleaner 2.0" that can be downloaded from the MajorGeeks Web site.

No registry there to interfere. Dir (with the right switches) and attrib should show all.

Hope this helps.


Kees