This Operation has been cancelled.

265346346 · #1 10-28-2003, 01:16 PM

Hello. I'm running XP Home. I get the error message, "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." (Its my home PC so I am the administrator) when I try to run msconfig and I've also just gotten that same message when I tried to install Zone Alarm. I'm pretty sure I have a worm/trojan/virus because I have previously been able to use msconfig. I scaned With McAfee and it found a problem but couldnt clean or delete the file because it was write protected. I belive it said I had MultiDropper-HO...whatever that is. I tried to go into the folder where the file was (C:\System Volume Information) but got Access Denied message. I uninstalled McAfee and installed Norton 2003 but it finds nothing wrong with my computer. When I installed norton it mentioned something to the effect of, "If you are installing this to investigate a possible virus then reboot from this CD." I wasn't quite sure what that meant so I installed anyway and that might be why Norton finds nothing wrong with my computer.

If anyone has any ideas I would really appreciate it.

Thanks

ESALADUANE · #2 10-28-2003, 02:54 PM

Trend Micro calls MultiDropper Trojans "TrojanRunner". I suggest that you scan with Trend Micro's free online virus scanner, "HouseCall" and follow their recommendations.
http://housecall.trendmicro.com/

Here's McAfee's Virus Profile on it.
http://us.mcafee.com/virusInfo/defau...=98757#aliases

265346346 · #3 10-28-2003, 06:30 PM

Trend Micro didn't find anything either. Maybe I don't have a virus then. Is there anything else that could cause those "restrictions" on msconfig, Zone Alarm and God knows what else?

Also there has been a new development in this saga. I'm not sure if it has anything to do with the previous problem. For some reason when I go to Add/Remove programs only about 15 or so installed programs show up which is much less than what should be there. It was working fine yesterday

I've been missing class and losing sleep over this. My computer is sick

Any help is very much appreciated.

scouse · #4 10-28-2003, 10:24 PM

Have you tryed a system restore? to a date before this started happening.

265346346 · #5 10-29-2003, 12:05 PM

Thats a good idea. *tries it*

Noooo! My computer is fairly new and system restore has been turned off.

jayrome · #6 11-03-2003, 08:56 PM

My computer (windows XP) has started doing the same thing just the other day. I noticed it right after I installed Final Fantasy XI. I started getting pop-ups on sites that normally didn't have pop-ups. I rebooted and I got the same msg as you "The operation has been cancelled...", when Zonealarm tried to start up. I am not able to access MSCONFIG either (same cancelled message) I ran a virus scan and found w32.kwbot.cworm and w32.hllp.handy. My antivirus settins have been changed also ( auto-protect and email scanning have been set to off).

Could FFXI have caused this error? It did warn to close my firewall and AV...I didn't.

Does any one have any suggestions?

Thanks,
Jeremy

ESALADUANE · #7 11-03-2003, 09:10 PM

They're spread through KaZaA and iMesh. Symantec has some information and recommendations on them.

W32.Kwbot.C.Worm
http://securityresponse.symantec.com...ot.c.worm.html

W32.HLLP.Handy
http://securityresponse.symantec.com...llp.handy.html