PUP.Optional.GlobalUpdate is a detection that was often seen in combination with Crossrider browser hijackers and Multiplug adware.
PUP.Optional.GlobalUpdate was named after the registry keys and folders it added on affected systems:
C:\Program Files (x86)\globalUpdate
Crossrider, Multiplug, and GlobalUpdate were all installed by bundlers.
Malwarebytes protects users from PUP.Optional.GlobalUpdate by using real-time protection.
Malwarebytes can detect and remove PUP.Optional.GlobalUpdate without further user interaction.
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
The Exclusions tab includes a list of items to be excluded from scans. The items may include files, folders, websites, or applications that connect to the Internet, as well as previously detected exploits.
To access the exclusions in Malwarebytes:
You may see these entries in FRST logs:
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe