PUM.Optional.DisplayHiddenFolder

Short Bio

This detection if for potentially unwanted modifications (PUMs) in the Windows registry that prevent users from finding hidden files and folders.

System Modifications

The following registry value data are modified:

Under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\Advanced\Folder\
Hidden\SHOWALL

From:
CheckedValue=1

To:
CheckedValue=0
or
CheckedValue=2

Under
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced\Folder\
Hidden\SHOWALL

From:
CheckedValue=1

To:
CheckedValue=0
or
CheckedValue=2

Remediation

Malwarebytes can modify these registry value data back to its Windows default setting without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.DisplayHiddenFolder could have been added to the system by malware or PUP.