"Run" command missing...

[Stratocus]

I have a laptop, running XP Home, that I bought secondhand a couple of years
ago. Never had any issues, and mostly still don't. Except that, today, I
wanted to launch an application from the Run Command only to find that it
doesn't exist in the Start Menu. I tried right-clicking and "customize" but
it wasn't available in the list. I then clicked the Windows + R keys and up
pops an error message: "This operation has been cancelled due to restrictions
in effect on this computer. Please contact your system administrator. " I am
the only user with Admin privileges. Other than installing a new OS is there
any way to overcome these restrictions?

 

[Doug Knox - [MS-MVP]]

Open a Windows Explorer window and go to C:\Windows and locate REGEDIT.EXE
Double click this file. Once Regedit is open, go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

In the right pane, look for a value called NoRun. If it exists, double
click it and set the value to 0 (zero). You may also want to see if the
value exists at:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

 

[Alan Edwards]

Try here:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 57, right-hand side

....Alan

 

[David Webb]

Go to http://www.kellys-korner-xp.com/xp_tweaks.htm and scroll down to line 57
and locate the link labeled "Restore the Run Command". This will provide you
with a registry file that you can download and then run to your merge into your
registry for a fix.

Restart your system after merging.

 

[Stratocus]

Thanks, Doug. I just tried that but when I double click regedit.exe I get a
new error message..."Registry editing has been disabled by your
administrator..." Fortunately, I guess, I've got Tune-Up Utilities on this
machine and it has it's own registry editor. I followed the path you
suggested and when I got down to NoRun and double click to change the value
(which is currently at 4) it wants to know if the Basis is Hexadecimal,
Decimal or Binary... The value defaults to 0 but when I click OK it remains
at 4 (at the Hexidecimal basis)...?

 

[PaulM]

That’s should be a REG_DWORD set to 0 not binary.

--
-------------------------------------------------------------------------------------
www.paulsxp.com
www.paulsxp.com/forum
www.supportspace.com/home/affiliates.s2?aiu=paulm

 

[Lem]

Thanks, Doug. I just tried that but when I double click regedit.exe I get a
new error message..."Registry editing has been disabled by your
administrator..." Fortunately, I guess, I've got Tune-Up Utilities on this
machine and it has it's own registry editor. I followed the path you
suggested and when I got down to NoRun and double click to change the value
(which is currently at 4) it wants to know if the Basis is Hexadecimal,
Decimal or Binary... The value defaults to 0 but when I click OK it remains
at 4 (at the Hexidecimal basis)...?

The error message "Registry editing has been disabled by your
administrator..." is a typical symptom of malware. Given this along
with the disabled "Run" command -- especially if you used to have the
"Run" command" and now don't -- the odds are good that your machine is
compromised.

As MVP PA Bear says:

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware
with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for
review by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.


--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

 

[Doug Knox - [MS-MVP]]

See www.dougknox.com, Security, Disable/Enable Registry Editing Tools.
Also, you can use my Windows XP Security Console to undo the Regedit,
restriction, as well as others.

As Leen pointed out, these restrictions suddenly showing up is an indication
of possible malware infection. His quoted info from PA Bear is good advice
to follow.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com