XP messed up - help!

[Phisherman]

An install crashed in the middle and now my PC is messed up. When I
attempt to run certain programs like deleting Internet history I get

"This operation has been cancelled due to restrictions in effect on
this computer, Please contact your administrator. "

Also, several icons in the Control Panel are missing. One is
Add/Remove Programs. I tried to "Switch Users" to Administration but
it doesn't recognize the administration password.

When I attempted to play an mp3 file, it downloaded a Codex before
playing.

Media Player 11 won't play an original DVD movie anymore, but it will
play an non copy-protected movie.

Webroot Spysweeper reported "Spector Pro," and I deleted it but it
came back. After several attempts it did not return. I ran full
sweeps of AdAware, Spybot, Webroot Spysweeper, and Avast with updated
definitions and no items were found.

When I tried to roll-back the registry to yesterday (everything was
running fine then), Windows XP reported that there have not been any
changes made.

I am running with Windows service pack 3. What should I try next? TIA

 

[Pegasus \(MVP\)]

An install crashed in the middle and now my PC is messed up. When I
attempt to run certain programs like deleting Internet history I get

"This operation has been cancelled due to restrictions in effect on
this computer, Please contact your administrator. "

Also, several icons in the Control Panel are missing. One is
Add/Remove Programs. I tried to "Switch Users" to Administration but
it doesn't recognize the administration password.

When I attempted to play an mp3 file, it downloaded a Codex before
playing.

Media Player 11 won't play an original DVD movie anymore, but it will
play an non copy-protected movie.

Webroot Spysweeper reported "Spector Pro," and I deleted it but it
came back. After several attempts it did not return. I ran full
sweeps of AdAware, Spybot, Webroot Spysweeper, and Avast with updated
definitions and no items were found.

When I tried to roll-back the registry to yesterday (everything was
running fine then), Windows XP reported that there have not been any
changes made.

I am running with Windows service pack 3. What should I try next? TIA

What exactly do you mean with "roll back the registry"? Using System
Restore? If yes, go back two or three days!

 

[Phisherman]

What exactly do you mean with "roll back the registry"? Using System
Restore? If yes, go back two or three days!

After attempting System Restore

"Your Computer cannot be restored to

8-1-2008
System Checkpoint

No Changes have been made to your computer..."


I tried other dates but got the same response. Help!

 

[Dustin Cook]

An install crashed in the middle and now my PC is messed up. When I
attempt to run certain programs like deleting Internet history I get

"This operation has been cancelled due to restrictions in effect on
this computer, Please contact your administrator. "

Also, several icons in the Control Panel are missing. One is
Add/Remove Programs. I tried to "Switch Users" to Administration but
it doesn't recognize the administration password.

When I attempted to play an mp3 file, it downloaded a Codex before
playing.

Media Player 11 won't play an original DVD movie anymore, but it will
play an non copy-protected movie.

Webroot Spysweeper reported "Spector Pro," and I deleted it but it
came back. After several attempts it did not return. I ran full
sweeps of AdAware, Spybot, Webroot Spysweeper, and Avast with updated
definitions and no items were found.

When I tried to roll-back the registry to yesterday (everything was
running fine then), Windows XP reported that there have not been any
changes made.

I am running with Windows service pack 3. What should I try next? TIA

Try using malwarebytes antimalware, and after scanning and removing
whatever it finds, reinstall service pack 3.

 

[Pegasus \(MVP\)]

After attempting System Restore

"Your Computer cannot be restored to

8-1-2008
System Checkpoint

No Changes have been made to your computer..."


I tried other dates but got the same response. Help!

You write "Windows XP reported that there have not been any changes
made." I think your interpretation of the System Restore messages is
incorrect. When it said "Your computer cannot be restorerd to . . ." it
meant that the System Restore tool failed for some reason. You can
try a manual system restore as per this KB Article:
http://support.microsoft.com/kb/307545

 

[Gandalff]

An install crashed in the middle and now my PC is messed up. When I
attempt to run certain programs like deleting Internet history I get

"This operation has been cancelled due to restrictions in effect on
this computer, Please contact your administrator. "

Also, several icons in the Control Panel are missing. One is
Add/Remove Programs. I tried to "Switch Users" to Administration but
it doesn't recognize the administration password.

When I attempted to play an mp3 file, it downloaded a Codex before
playing.

Media Player 11 won't play an original DVD movie anymore, but it will
play an non copy-protected movie.

Webroot Spysweeper reported "Spector Pro," and I deleted it but it
came back. After several attempts it did not return. I ran full
sweeps of AdAware, Spybot, Webroot Spysweeper, and Avast with updated
definitions and no items were found.

When I tried to roll-back the registry to yesterday (everything was
running fine then), Windows XP reported that there have not been any
changes made.

I am running with Windows service pack 3. What should I try next? TIA

Hi
Unfortunately you have a virus that has taken over the control of your
administritive rights,and disabled certain very much needed
utilities.Firstly as previously mentioned by Dustin, Try going into Control
Panel ( if it will let you) run add/remove programs, and uninstall the
program you think caused the problem, also uninstall service pack 3. reboot
and see if that sorts it out. Failing that run a full virus/spyware/malware
scan.
And if that fails I think your only option would be to format and re-install
windows.
For future reference, I would suggest using a backup program that enables
you to do a "snapshot" of your entire boot/root drive ( Usually C:\) for
this, from first hand experience I would opt for the free version of Macrium
Reflect. this can be obtained here...............
http://www.macrium.com/
Download the "trial" version and install it, it will ask you to register, do
this and they will immediately send you a product key, enter the key and the
program will install.
Go through the "wizard" and create a FULL IMAGE of your C:\ drive, the
program will also ask for your installation cd/dvd and a blank dvd-r/dvd+r
so it can create a recovery dvd/cd. It will then make a boot disk. Then if
you have any more similar problems, simply boot from the recovery disk
follow the very simple on screen wizard and it will put your computer back
to the EXACT state it was before the crash. you shold then run this back-up
utility about once a month.
In fact, to be honest I find this free program far superior to both Acronis
true image and Genie backup manager. I own both all three of them and
Macrium is by far the easiest.
regards
Gandalf the Wizard
MCDST, MCSA, MCSE, MCPD, CCNA

 

[Phisherman]

You write "Windows XP reported that there have not been any changes
made." I think your interpretation of the System Restore messages is
incorrect. When it said "Your computer cannot be restorerd to . . ." it
meant that the System Restore tool failed for some reason. You can
try a manual system restore as per this KB Article:
http://support.microsoft.com/kb/307545

I booted from the Windows CD and pressed option "R" as stated per
KB307545. It prompted me for the administration password which it did
not accept (but I know it is). Can malicious software change
administration privileges or alter a password? I tried again without
a password (pressing Enter). Will Windows run the Recovery Console
without administration privileges? Or, how can I get administration
privileges back?

 

[Pegasus \(MVP\)]

I booted from the Windows CD and pressed option "R" as stated per
KB307545. It prompted me for the administration password which it did
not accept (but I know it is). Can malicious software change
administration privileges or alter a password? I tried again without
a password (pressing Enter). Will Windows run the Recovery Console
without administration privileges? Or, how can I get administration
privileges back?

It's this VFAQ: How to reset the Administrator's password -
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html