PUM.Optional.NoDispCPL

Short Bio

This is the detection for a potentially unwanted modification (PUM) on the registry that prevents the user from accessing the Display Control Panel in Windows.

This is often done by malware to hinder the user from removing it. The user gets the error message, “Your system administrator has disabled launching of the DisplaySettings Control Panel”, when he/she tries to open the command prompt.

System Modifications

The following registry value data is modified:

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\System

From
NoDispCPL=0

To
NoDispCPL=1

Remediation

Malwarebytes can modify this registry value data back to its Windows default setting without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.DisableCMDPrompt could have been added to the system by malware or a PUP.