PUP.Optional.GlobalUpdate

Short bio

This detection was often seen in combination with Crossrider browser hijackers and Multiplug adware. It was named after the registry keys and folders it added on affected systems:

  • HKLM\SOFTWARE\CLASSES\globalUpdate
  • C:\Program Files (x86)\globalUpdate

 

Common infection method

Crossrider, Multiplug, and GlobalUpdate were all installed by bundlers.

Associated families

  • PUP.Optional.Crossrider
  • PUP.Optional.Multiplug

Remediation

Malwarebytes removes PUP.Optional.GlobalUpdate completely. No further cleanup is required.

Select your language