PUM.Optional.WindowsToolDisabled

Short Bio

This is the detection of a potentially unwanted modification (PUM) on the registry that will grey out the Configuration option for System Restore on the System Protection tab.

System Modifications

The following registry value data is modified:

Under

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\
Windows NT\SystemRestore

From:
DisableConfig=0

To:
DisableConfig=1

Remediation

Malwarebytes can modify this registry value data back to its Windows default setting without user interaction.

Also, we advise users to do a full system scan as PUM.Optional.WindowsToolDisabled could have been added to the system by malware or a PUP.