PUM.Optional.DisallowRun

Short Bio

This detection is for potentially unwanted modifications (PUMs) in the registry where users are prevented from running specific computer programs that could aid them in manually removing malware like the Registry Editor, the Command Prompt, or the Microsoft Management Console.

 

System Modifications

The following registry entry is added:

Under:
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer\DisallowRun

Entry:
{random 1 digit number}={executable file name of computer program}

Remediation

Malwarebytes can modify this registry value data back to its Windows default setting without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.DisallowRun could have been added to the system by malware or PUP.

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language