After virus removal user can not get into control panel

Posted on 2007-07-30
Last Modified: 2012-05-05
I have a computer that someone brought to me with a lot of popups and the usual adware/spyware issues.  I think I have it fairly clean, but it appears the security policy or something became corrupt in the process.

The error I get when I try to go into System Properties, control panel etc is "this operation has been cancelled due to restrictions in effect on this computer".

I created a new user and that user can get into everything with no problem.  I am trying to avoid copying everything over to the new account, is there any way to reset the security for that user to default?


Question by:truth_talker
    LVL 3

    Expert Comment

    Hi there truth talker,

    Is TweakUI installed on the computer? If it is it could be that the 'no control panel' option is selected.
    Go to the registry editor and remove "NoControlPanel" from HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ Policies\Explorer
    LVL 47

    Expert Comment

    Some scanners do remove the bad files only and not fix the registry entries that have been modified.

    If you have Hijackthis, restrictions will show up there and fixing the entry will fix it(05 line) other restrictions are also in 06 and 07(07 is the regedit restriction)

    Or if there are other policy restrictions/registry entries modified by the virus/trojans then running SDFix might be a good idea to fix all registry entries modified by those nasties.

    Download SDFix and save it to your desktop.

    Double click SDFix.exe and it will extract the files to %systemdrive%
    (Drive that contains the Windows Directory, typically C:\SDFix)

    Please then reboot your computer in Safe Mode by doing the following :

    * Restart your computer
    * After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    *  Instead of Windows loading as normal, a menu with options should appear;
    *  Select the first option, to run Windows in Safe Mode, then press "Enter".
    *  Choose your usual account.

    *  Open the extracted folder and double click "RunThis.bat" to start the script.
    *  Type "Y" to begin the script.
    *  It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
    *  Press any Key and it will restart the PC.
    *  Your system will take longer that normal to restart as the fixtool will be running and removing files.
    *  When the desktop loads the Fixtool will complete the removal and display "Finished", then press any key to end the script and load your desktop icons.

    Author Comment

    After performing the steps from RubixCubeSupport I can get into the control panel, but not everything is back.

    Now when I do Microsoft Update I get "Network policy settings prevent you from using this website to get updates for your computer.

    If you believe you have received this message in error, please contact your system administrator.  
     Read more about steps you can take to resolve this problem (error number 0x8DDD0003) yourself. ".

    I will try the suggestion from rpggamergir and see what happens.


    LVL 3

    Accepted Solution

    If that doesn't work you could try going to the following keys and deleting the following values:

    Delete "NoWindowsUpdate" if it's there

    Policies\Windows Update
    Delete  "DisableWindowsUpdateAccess" if it's there.

    Group Policy Objects\LocalUser\Software\Microsoft\Windows\
    CurrentVersion\Policies\Windows Update
    Delete "DisableWindowsUpdateAccess" if it's there.

    Hope this helps

    Author Comment

    Thanks RubixCubeSupport, that seems to have fixed the Windows Update problem.

    One question though on the SDFix, should that be run under the Administrator account or the account having the problem, or does it matter?

    I tried SDFix under Administrator and it didn't fix the Windows Update problem, only the registry entry from RubixCubeSupport fixed it.


    LVL 3

    Expert Comment

    Hi truth talker, I'm glad that that helped. Now I'm no expert with SDFix, but i believe that it should be run in the account that you are having problems with. But be careful with it, it is a powerful tool
    LVL 3

    Expert Comment

    Hi there Patrick,
    How did you go? Any more problems?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    I wanted to pass this along in case anyone has a problem removing a device from the Device Manager, or if you suspect a corrupted Driver that you want to remove in its entirety. I know it is kinda lengthy and very basic in its format, but I figured …
    Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now