Today I wanted to run PowerShell but got this: “this operation has been cancelled due to restrictions in effect on this computer…” I looked at registry and in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer there is a key - Disallow Run which has three items: mshta.exe, powershell.exe and bitsadmin.exe as its values. System was scanned with various scanners (including comodo) and found nothing. I’m going to delete that key, but before that maybe someone would give any advises where could I look elsewhere for possible system modifications by virus related to this…
Also note that I recently had a virus on my flash drive which was inserted on my secondary OS installation on the same hard drive. Thanks in advance.