Short bio

This detection was often seen in combination with Crossrider browser hijackers and Multiplug adware. It was named after the registry keys and folders it added on affected systems:


Common infection method

Crossrider, Multiplug, and GlobalUpdate were all installed by bundlers.

Associated families


Malwarebytes removes PUP.Optional.GlobalUpdate completely. No further cleanup is required.