Member Avatar for abu.rasheed3

Anyone knows hot to solve my problem. I can't acces my drive in c, d, and e. (drive partition). When I clicked it, it was stated, " This operation has been canceled due to restrictions in effect on this computer. Please contact you system administrator. It was happened about three days ago when i unpurposely clicke an exe file from the internet. Could it be my computer hit by the virus? Now, my computer has many users account. Hope you understand what I mean. Sorry for my bad English. Iam Indonesian. Thank you very much

  • 3 Contributors
  • 2 Replies
  • 222 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by rubberman

Dani AI

Generated

Short, practical triage and fixes (builds on ’s admin-account hint and ’s scan suggestion).

This error often means a registry/group-policy restriction or malware changed shell/association entries so Explorer cannot open drives or launch programs. Common culprits are the Explorer policy keys (DisallowRun / NoDrives / NoViewOnDrive) or Image File Execution Options entries used to neutralize AV processes. (learn.microsoft.com)

Quick, safe checklist (do these in order; back up and create a System Restore point first):

  1. Export the registry hive for the current user before changing anything.
  2. Inspect these keys and export them before editing:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CLASSES_ROOT\Directory\shell\open\command
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

    Look for a DisallowRun subkey, NoDrives / NoViewOnDrive values, or IFEO entries with a Debugger value that points to a non-standard EXE (especially for antivirus executables). If a value clearly blocks Explorer or points to a rogue exe, export then remove that value. (Do not delete keys unless there is a saved export to restore.) (learn.microsoft.com)

If edits are not possible or malware is suspected, scan from clean media: download Microsoft Safety Scanner on a known-clean PC, copy it to a USB and run it on the affected machine; or boot a rescue environment (for example, Kaspersky Rescue Disk) and run a full offline scan and removal. Updating signatures before scanning is important. (learn.microsoft.com)

After removal, repair system files: run DISM /Online /Cleanup-Image /RestoreHealth followed by sfc /scannow from an elevated command prompt. If the problem is only in one user profile, create a new profile; if corruption persists, consider an in-place repair install. Backups and care with the registry are essential. (support.microsoft.com)

Warnings: never paste registry changes from an untrusted site, and avoid removing keys unless an export exists. If unsure, seek hands-on help from a trusted technician.

Recommended Answers

All 2 Replies

Member Avatar for BogdanCov

You said your computer has many users accounts. Try to log on Administrator's account.

Member Avatar for rubberman

Also, try booting into safe mode, and run some industrial-strength virus/malware scanners on the system. It does seem like you have been pwnd, and it is likely some sort of "ransom-ware". Can you boot the system and run your web browser?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.