This operation has been cancelled due to restrictions in effect on this computer

dilbertbert · Oct 1, 2008

I am so stumped, if someone could help I would be grateful,

I managed to contract some malware that has done a bangup job on my registry. I am unable to run ANY programs. When I try I receive the message "This operation has been canceled due to restrictions in effect on this computer". Remember I cannot get a cmd line, I can't run regedit... anything! I am able to log onto the PC as administrator and everything is fine. The problem only applies to a particular user account.

I have ran microsoft's SteadyState from the administrator logon and under the "Block Programs" tab there are no blocked programs for the user.

I'm guessing there is some kind of registry entry that is stopping the user id from running any .exe files but I don't know what entry that would be and I don't know how to look while logged on as administrator.

By the way I'm running Win XP Pro w/ SP3

Oh yea, one more thing.... the system time in the toolbar has been messed with, instead of saying "AM" it says "looser" and instead of "PM" it is a profanity that I will not type on this forum.

I feel quite humbled by this problem, I've been in IT for almost 20 yrs but can't solve this.

Thanks in advance!
Edit/Delete Message

chaslang · Oct 1, 2008

Welcome to Major Geeks!

Try running the below procedure to see if it helps.

Resetting Registry and File Permissions

After doing the above, please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can run steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

Log in or Sign up

This operation has been cancelled due to restrictions in effect on this computer

dilbertbert Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member