PUP.Optional.GlobalUpdate is a detection that was often seen in combination with Crossrider browser hijackers and Multiplug adware.
PUP.Optional.GlobalUpdate was named after the registry keys and folders it added on affected systems:
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\globalUpdate
C:\Program Files (x86)\globalUpdate
Crossrider, Multiplug, and GlobalUpdate were all installed by bundlers.
Malwarebytes protects users from PUP.Optional.GlobalUpdate by using real-time protection.
Malwarebytes blocks PUP.Optional.GlobalUpdate
Malwarebytes can detect and remove PUP.Optional.GlobalUpdate without further user interaction.
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.
You may see these entries in FRST logs:
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
Select your language