Get Icons ads: what it is and how to remove it
Get Icons is an extension that can be downloaded for seemingly innocent reasons - it is advertised as an app that "allows you to download the most beautiful icons on the internet." Indeed, some people are heavy into customization of their browsing or computer-using experience, so they might find changing a few icons quite appealing.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Not sure what sends your browser to phonenow.net? An automatic scan looks at the usual sources for you.
Do it yourself · free Remove Get Icons ads yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Get Icons ads: summary
| Distribution | Software bundles, third-party websites, misleading ads |
|---|---|
| Damage | Installation of other potentially unwanted software or malware, personal data disclosure to third parties/cybercriminals, monetary losses due to fake offers |
| Name | Get Icons |
| Type | Adware, potentially unwanted browser extension |
| Alleged function | Provides accessibility to "beautiful icons on the internet" |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Symptoms | Redirects to an unknown domain |
|---|---|
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | phonenow.net |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 8 March 2022 |
| Facts checked | 6 October 2026 |
Is Get Icons ads dangerous?
From our report of Mar 2022 · not reviewed since
Get Icons is a browser extension with the sole goal of exposing users to intrusive ads
Get Icons is an extension that can be downloaded for seemingly innocent reasons - it is advertised as an app that "allows you to download the most beautiful icons on the internet."
Indeed, some people are heavy into customization of their browsing or computer-using experience, so they might find changing a few icons quite appealing. Unfortunately, this is only a disguise for what actually is an adware-type application distributed as an extension for Google Chrome, MS Edge, and other compatible browsers.
First of all, it is important to note that the Get Icons extension might not only be downloaded due to its alleged useful functionality but it also manages to find its way into users' systems via deceptive methods and is installed behind their backs. For example, a misleading ad might tell users that they need to update an already installed app.
Software bundling is also a commonly used tactic for potentially unwanted program distribution, where several apps are compiled into a standalone installer, and optional components are deliberately hidden from users' views during the installation process of the freeware.
The main goal of adware is to deliver pop-ups, deals, offers, coupons, and other types of advertisements to users. In these cases, the advertised features of the app fade, as the developers only have one purpose in mind - to monetize users' clicks. In order to stop the unwanted activity, you have to uninstall the Get Icons extension from your browser.
From our report of Mar 2022 · not reviewed since
Operation
Unlike browser hijackers, Get Icons would not change the homepage, new tab, or the search provider.
By doing so, browser hijackers commonly provide a sign to users that something is not correct - this is especially useful after being infected inadvertently. However, with adware, things are quite a bit different.
Upon installation, the Get Icons app asks for the following permissions:
By giving these permissions to the extension, you allow it to modify what and when you see things on various websites. Evidently, they are nothing more than advertisements and can be inserted into pages that would not have them initially.
It is a very commonly used technique by adware creators, as many users would not even check the permissions before installing the app on their browsers or systems. Thus, we strongly recommend always checking what the app can do once it's installed on your device prior to allowing its installation.
In order to show ads that users are more likely to click on, most PUPs tend to collect user information. While the gathered data is mostly anonymous, some of it might not be. For example, the IP address is considered to be personal data in some jurisdictions or countries. Regardless, it is better to have fewer third-party tracking activities going on in the background.
In order to storm the intrusive advertisements and unwanted data tracking activities, you should eliminate the unwanted application from your device.
- Allow this extension to read and change all your data on websites you visit
- Block content on any page.
From our report of Mar 2022 · not reviewed since
More from our earlier report on Get Icons
- Malware or adware infections can diminish the performance of your computer or cause serious stability issues.
Check your browser and PC
- Address:
phonenow.net
How to remove Get Icons ads
How to remove the Get Icons extension
Do the browser steps in every browser and profile on the PC, then check Windows for the program that installed the extension.
Step 1: Remove extensions you did not add
Get Icons often works through an extension, so go through the extension list of each browser:
chrome://extensionsedge://extensions- Extensions and themes in Firefox
Switch suspicious extensions off one at a time and reload the page where the problem shows, then remove the one that stops it, and any other you did not add.
Remember the other browsers and profiles on the PC. If Remove is missing or greyed out, a policy forces the extension, which the policy step deals with. Windows 11 and Windows 10 show the same pages.
Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Uninstall programs you did not mean to install
Open Settings > Apps > Installed apps in Windows 11, or Settings > Apps > Apps & features in Windows 10, and sort the list by install date. Look at what appeared around the day the problem started and uninstall every program you do not recognise or did not choose.
Free converters, PDF and video tools, "system optimizers" and unknown browsers are the usual carriers of Get Icons. If a name is unclear, search for it before you remove it, so you do not uninstall a driver or a Windows component.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Reset the browser
Finish the browser part with a reset, which puts the search engine, start page, new tab page and site permissions back to their defaults and switches extensions off. Chrome: Settings > Reset settings > Restore settings to their original defaults.
Edge: Settings > Reset settings. Firefox: Help > More troubleshooting information > Refresh Firefox, which also removes its extensions. Your bookmarks and saved passwords are kept, and the menus are the same on Windows 11 and Windows 10.
Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 4: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Stream videos without limitations, no matter where you are
There are multiple parties that could find out almost anything about you by checking your online activity.
While this is highly unlikely, advertisers and tech companies are constantly tracking you online. The first step to privacy should be a secure browser that focuses on tracker reduction to a minimum.
Even if you employ a secure browser, you will not be able to access websites that are restricted due to local government laws or other reasons. In other words, you may not be able to stream Disney+ or US-based Netflix in some countries. To bypass these restrictions, you can employ a powerful VPN, which provides dedicated servers for torrenting and streaming, not slowing you down in the process.
Data backups are important - recover your lost files
Ransomware is one of the biggest threats to personal data.
Once it is executed on a machine, it launches a sophisticated encryption algorithm that locks all your files, although it does not destroy them. The most common misconception is that anti-malware software can return files to their previous states. This is not true, however, and data remains locked after the malicious payload is deleted.
While regular data backups are the only secure method to recover your files after a ransomware attack, tools such as can also be effective and restore at least some of your lost data.
From our report of Mar 2022 · not reviewed since
The correct Get Icons removal process
Ad-revenue is a very legitimate and widely-used monetization method used by many websites and applications.
Therefore, you should not think that every app that shows some ads is automatically adware - that's not true. As long as ads do not interfere with the normal operation of the app and don't make you click on them accidentally by popping up randomly, it is not adware. Likewise, potentially unwanted apps are also distributed in deceptive methods, and it is one of the primary traits of such software.
For example, if Get Icons promises to allow downloading various icons but serves intrusive ad campaigns, its usability and usefulness are debatable.
Uninstall the extension
Browser extensions are really easy to eliminate under normal circumstances. The easiest way to do so is by checking the "Extensions" button next to the URL bar.
MS Edge (legacy)
Clean the web browsers
Adware displays ads on various websites, and some of these can be very attractive to users they are shown to. This happens due to user data gathering practices - which websites they visit, search queries they type, links they click, and much more. This data is later used to generate ads that are crafted for particular user groups, sometimes making them buy products they otherwise wouldn't.
To collect this information, adware uses cookies, web beacons, pixels, and other tracking technologies. Bits of information related to this process are stored locally on users' computers, thus security experts highly recommend cleaning web data after the PUP/malware removal and also doing so regularly from time to time.
You can easily do this by employing a powerful maintenance and repair utility - it could also fix any system issues that the infection could have caused. Alternatively, follow these instructions:
MS Edge (Chromium)
MS Edge (legacy)
Scan with anti-malware
Your final step is to make sure that your system is not affected by more dangerous threats, such as Trojans or rootkits. Malware can be particularly stealthy - not run active windows, hijack legitimate Windows processes, not show up in the installed program lists, etc.
Therefore, we strongly recommend you download and install , , or another reputable software in order to ensure that all the malicious processes and files are eliminated from the system at once. Anti-malware is one of the main ways to defend yourself against malware attacks in the future as well, so make sure you have it running at all times.
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted plugin and click Remove.
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click on Uninstall at the bottom.
- Click Safari > Preferences...
- In the new window, pick Extensions.
- Select the unwanted extension and select Uninstall.
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies, and other site data, as well as Cached images and files.
- Click Clear data.
- Click Menu and pick Options.
- Go to Privacy & Security section.
- Click on Clear Data...
- Select Cookies and Site Data, as well as Cached Web Content, and press Clear.
- Click on Menu and go to Settings.
- Select Privacy and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
- Under Clear browsing data, pick Choose what to clear.
- Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
- Click Safari > Clear History...
- From the drop-down menu under Clear, pick all history.
- Confirm with Clear History.
From our report of Mar 2022 · not reviewed since
Avoid adware with these tips
As we already mentioned, users don't usually install potentially unwanted programs which disturb their web browsing experience or perform other disruptive or unwanted tasks.
The distributors of adware and other shady software are aware of that, hence they often choose to use deceptive distribution methods to spread it to as many users as possible in order to retain the maximum amount of ad revenue. There are two main methods by PUP developers to distribute their software:
Software bundling is a time-proven technique that has been proved extremely successful over the years. When downloading freeware, always pick the Advanced/Custom instead of Recommended/Quick settings in order to stay in control of what is being installed on your device.
Also, whenever you are redirected to a suspicious website (this usually happens on high-risk sites such as torrents), e.g., Phonenow.net, News-cetowu.cc, or Cusj.xyz, do not interact with it in any way.
You may be asked to subscribe to push notifications or download potentially dangerous software. Also, don't believe claims that something has expired, that needs to be updated, or that virus was found on your system - these are all scams and should be ignored.
- Misleading advertisements
- Software bundles.
Questions about Get Icons ads
phonenow.net opens when I click links. What causes it?
When every click leads to phonenow.net first, an extension or a script on the page is rewriting the links. If it happens only on one site, that site uses aggressive ads; close it and use another source. If it happens everywhere, open the browser in a private window, where extensions are normally off, and try again.
No redirect in the private window means one of your extensions is responsible: remove the ones you do not know. A redirect in the private window too means the cause is outside the extensions, such as a notification permission, a changed search setting or a program installed on the PC. The removal steps in this guide cover each of those.
Did phonenow.net install a virus on my PC?
Very unlikely, unless you downloaded and opened something from the pages it led to. Redirect domains such as phonenow.net sell your visit to advertisers; they do not need to install anything to make money.
What can be installed is the thing that causes the redirects in the first place, such as an extension or an ad-supported program that came with free software. That is why the checks in this guide look at extensions, notification permissions and Installed apps.
A full scan with Microsoft Defender afterwards gives you a clear answer about the rest of the PC. If the scan is clean and the redirects stop after removing the cause, you are done.
What is Get Icons?
Get Icons is an adware extension, a kind of adware. It earns money by showing redirects through ad pages, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Get Icons does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Which browsers does Get Icons affect?
In the cases we checked, Get Icons showed up in Chrome, Edge and Firefox. That does not rule out others on your PC, since adware installers often target every browser they find, and permissions and extensions sync across computers signed in to the same browser account.
Open each browser you have, go to its extensions page and its notification settings, and remove anything you do not recognise. Profiles count separately: Chrome and Edge can each hold several, and each one needs checking on its own.
Are the pop-ups I see really from Get Icons?
Compare them with the details in the table above. Get Icons produces redirects through ad pages, and the clearest sign of it is redirects to phonenow.net. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Can an adware pop-up infect my PC just by appearing?
No. A pop-up, a notification or a new tab is only a web page or a message. It cannot run programs on Windows by itself, provided the browser and Windows are up to date. Infection needs a step from you:
- running a downloaded file
- installing an extension
- giving a stranger remote access
That is why scam pages work so hard to make you click. Close such pages with the tab's X or by closing the browser, not with buttons inside the page, which may start a download.
My scan found nothing, but the ads continue. Why?
Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.
Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.
Did Get Icons collect my data?
Adware typically collects what it needs to choose ads:
- the sites you visit
- search terms
- approximate location
- browser and system details
Extensions with permission to read and change data on all websites can technically see everything on those pages, including forms. That is a privacy problem rather than proof of theft.
If you typed card details or passwords while it was active, changing the most important passwords is a reasonable precaution. Clearing cookies after removal ends the tracking sessions it may have started.
Why is my browser so slow since the ads started?
Each page now does extra work. An adware extension reads the page, decides where to put ads, loads them from ad servers and reports your visit, and that happens on every tab. Ad-supported programs add their own background activity.
Removing the extension or program usually makes the browser fast again at once. If it stays slow, open the browser's own task manager with Shift+Esc in Chrome or Edge and look for extensions using a lot of memory or processor time.
Will Fortect remove Get Icons?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Get Icons, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- NTT: Cookies and Web Beacons (read October 6, 2026)
- Business Insider: What are push notifications? How the pop-up alerts sent by apps, devices, and browsers work (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)