PUM.Optional.DisabledRightClick

Short bio

This detection is for potentially unwanted modifications (PUMs) in the Windows registry where the context menu—also known as the right-click shortcut menu—is disabled. As such, users won’t be able to see options when they press the right-click button of their mouse or trackpad while in the browser, on their desktop, or at a file or folder. These changes could be made by malware to hinder users from identifying, verifying, and removing it.

System modifications

The following registry value data are modified or added:

Under
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\
Internet Explorer\Restrictions

From:
NoBrowserContextMenu=0

To:
NoBrowserContextMenu=1

Under
HKEY_CURRENT_USER\Software\Policies\Microsoft\
Internet Explorer\Restrictions

From:
NoBrowserContextMenu=0

To:
NoBrowserContextMenu=1

Under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Policies\Explorer

From:
NoViewContextMenu=0

To:
NoViewContextMenu=1

Under
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer

From:
NoViewContextMenu=0

To:
NoViewContextMenu=1

Remediation

Malwarebytes can modify these registry value data back to their Windows default settings without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.DisabledRightClick could have been added to the system by malware or a PUP.

Add an exclusion

When PUM is detected on your computer, Malwarebytes for Windows does not know if it was authorized. Optimization software, malware, and Potentially Unwanted Programs (PUPs) are known to make these types of changes, hence they are regarded as potentially unwanted.

To have Malwarebytes for Windows ignore a PUM, you must add the PUM as an exclusion.

1. Open Malwarebytes for Windows.
2. Click Settings, then click the Protection tab.
   
3. Scroll down to the bottom.
4. Turn off Automatically quarantine detected malware.Turning this setting off prevents Malwarebytes for Windows from quarantining the PUM automatically.
   
5. Go to the Dashboard, then click Scan Now.
   
6. When the Threat Scan Results appear, uncheck the box next to the detected PUM you want to keep.
   
7. Click Next.
   
8. On the Remaining Items window, click Ignore Always to add the exclude the detected PUM(s).
   
9. Turn on Automatically quarantine detected malware.To find this setting, click Settings > Protection.

When a PUM is excluded, Malwarebytes for Windows does not detect the PUM during scans or Real-Time Protection.