PUM.Optional.ExpNoClose

Short bio

This is the detection for a potentially unwanted modification (PUM) on the registry that removes the Shut Down option from the Windows Start Menu, including the Shut Down button in the Windows Security dialog box.

System modification

The following registry value data is modified:

Under
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer

From:
NoClose=0

To:
NoClose=1

Remediation

Malwarebytes can modify this registry value data back to its Windows default setting without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.ExpNoClose modifications could have been done by malware or PUP.

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language