Windows Run Command box not working

[RuinBabinn]

Hello,

I'm running on an admin account in windows xp pro.
When I try to use <WIN - R> key combo for accessing to windows Run Command box, I receive this message

 "Restrictions:
 This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."

If I open the Group Policy Editor and go check in User Configuration > Administration Templates > Start Menu and Task, all items there are "Not Configured" (same for the item called "Remove Run menu from Start Menu"). I also check for all the "NoRun" iterations in registry but am not seeing the culprit if it's there...

I did check the system's health with some tools (SpyBot-S&D, SUPERAntiSpyware, David H. Lipman's and AVZ Antiviral's Toolkit, and NOD32), but nothing obviously nefarious was found.

--
All advices very welcome

[Spoiler]

I have found the global policies to stick sometime. Or if you change one and than change it back to the Not Configured is still stays as configured. I also had the same thing happen with the regedit command.


Go in and change it to disabled.

[RuinBabinn]

I have found the global policies to stick sometime. Or if you change one and than change it back to the Not Configured is still stays as configured. I also had the same thing happen with the regedit command.

Go in and change it to disabled.

Tried to mix and mess within GPE, but no better go.

I also just run an HijackThis pass.
There only is a possibly weird reporting about "CTFMON.EXE" file (see http://support.microsoft.com/kb/282599):

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')


I don't have MS Office installed on this pc! And, strangely, this file is not seen by other tools like MS' AutoRun and A-square's HiJackFree...

--
Thanks for your reply, Spoiler.

[Spoiler]

You know you have to reboot after making changes to the GP. Right?

[RuinBabinn]

You know you have to reboot after making changes to the GP. Right?

Yes.

Here's an idea of this area of my registry at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer


ClearRecentDocsOnExit REG_DWORD 0x00000001 (1)
ForceStartMenuLogoff REG_DWORD 0x00000000 (0)
NoActiveDesktop REG_BINARY 01 00 00 00
NoActiveDesktopChanges REG_BINARY 01 00 00 00
NoComputersNearMe REG_BINARY 01 00 00 00
NoDriveAutoRun REG_DWORD 0x03fffffb (67108859)
NoDrives REG_BINARY 00 00 00 00
NoDriveTypeAutoRun REG_DWORD 0x000000f5 (245)
NoFavoritesMenu REG_DWORD 0x00000000 (0)
NoInstrumentation REG_DWORD 0x00000001 (1)
NoInternetOpenWith REG_DWORD 0x00000001 (1)
NoLowDiskSpaceChecks REG_DWORD 0x00000001 (1)
NoRecentDocsHistory REG_DWORD 0x00000001 (1)
NoRecentDocsMenu REG_DWORD 0x00000001 (1)
NoRecentDocsNetHood REG_DWORD 0x00000001 (1)
NoRun REG_DWORD 0x00000000 (0)
NoSharedDocuments REG_BINARY 01 00 00 00
NoSMHelp REG_DWORD 0x00000000 (0)
NoSMMyDocs REG_DWORD 0x00000001 (1)
NoSMMyPictures REG_DWORD 0x00000001 (1)
NoStartMenuMyMusic REG_DWORD 0x00000001 (1)
NoStartMenuPinnedList REG_DWORD 0x00000001 (1)
NoUserNameInStartMenu REG_DWORD 0x00000001 (1)
NoWindowsUpdate REG_DWORD 0x00000000 (0)
--

[RuinBabinn]

SOLVED

I had to change back "NoRun" value from 1 to 0 in those 2 two keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

I don't know how and when they build there first, but I will keep an eye on for any possible malware at work. Thanks for your try at helping me.