InstallCore ads: what it is and how to remove it
InstallCore is a potentially unwanted application launched by ironSource that displays intrusive ads and collects browsing data. It is often bundled with free software and flagged as Adware.InstallCore.
Facts checked October 5, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If InstallCore keeps coming back after uninstalling, a scan can find what reinstalls it.
Do it yourself · free Remove InstallCore ads yourself 4 steps, about 12 minutes, no software needed.
Start the steps
InstallCore ads: summary
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Name | InstallCore |
| Type | Adware extension |
| Symptoms | An unknown program in Installed apps |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 4 more facts
| Evidence | 4 write-ups by security sites; details still limited |
|---|---|
| Program | InstallCore |
| First seen | 23 June 2020 |
| Facts checked | 5 October 2026 |
Is InstallCore ads dangerous?
What readers reported about InstallCore
I receive many ads and recently detected PUP.Optional.InstallCore. I receive many ads when browsing the Internet and recently detected PUP.Optional.InstallCore operating on my PC. Can it be the cause of these annoying ads?
PUP.Optional.InstallCore ads all over my browser!. Help me to switch off those pop-ups!! I'm sick of them already!
From the comments under our earlier guide; names and contact details removed.
From our report of Jun 2020 · not reviewed since
InstallCore adware that can generate intrusive ads for generating pay-per-click revenue
InstallCore is a free application launched by ironSource Ltd. company in 2010.
It is promoted as "the leading application installation platform for premium publishers" and allegedly claims to improve users' browsing experience by speeding up software installation. Unfortunately, it's yet another intrusive adware and potentially unwanted application (PUA), which may flood web browsers with intrusive commercials, banners, and hyperlinks to gain financial profit from advertising.
Although initially, it may seem like a useful HTML-based installer for improving the installation of apps, you should know that it is recognized as PUP.Optional.InstallCore or Adware.InstallCore, while most of the reputable security vendors warn people not to trust it due to potentially dangerous ads that it may deliver, as well as possible redirect to phishing sites.
On top of that, the application is known for spying on its users with the help of web beacons and tracking cookies.
If you have noticed an increased amount of ads during your web browsing, the culprit of that may be the InstallCore virus. This installer has been spreading various possibly unwanted components in a bundle with freeware and shareware. Therefore, if you can't browse the net without seeing random ads everywhere, you should check the system for malware.
The InstallCore ads are intrusive as they tend to cover the original content of the websites. However, these ads can be linked to suspicious third-party websites that may be primarily used for spreading malware or tricking people into paying for various useless subscriptions.
In most of the cases, InstallCore adware is set to collect data related to people's browsing activity. However, many people go against the disclosure of their email address, PC's location, IP address, and similar information that can give away their identity.
After collecting the required amount of data and sending it to affiliated parties, this application is likely to adapt most of the InstallCore ads according to user's preferences, thus increasing the number of clicks.
That's why security experts agree upon the need to remove InstallCore virus from the machine. If you have recently installed this program on your computer or noticed ads marked by the slogan of this tool, you should double-check your computer with a reputable anti-spyware.
InstallCore removal will stop intrusive ads and allow you to surf the net uninterrupted. Besides, third parties won't be capable of spying on your web browsing activities easily.


From our report of Jun 2020 · not reviewed since
More from our earlier report on InstallCore
- Potentially Unwanted Application (PUA), adware
- Web browser keeps displaying an excessive amount of popups and banners that are filled with sponsored content.
- The web browser may slow down
- The application is not dangerous, though the content that it brings to its users can expose users to irrelevant or even potentially dangerous content
- The adware can be eliminated with anti-malware.
- That's a quick solution for those who save time.
- optimization tool helps people to recover system's performance after malware infection
- Online forums are full of users' questions on how to uninstall Adware.InstallCore virus
How to remove InstallCore ads
How to remove the InstallCore extension
Do the browser steps in every browser and profile on the PC, then check Windows for the program that installed the extension.
Step 1: Remove extensions you did not add
InstallCore often works through an extension, so go through the extension list of each browser:
chrome://extensionsedge://extensions- Extensions and themes in Firefox
Switch suspicious extensions off one at a time and reload the page where the problem shows, then remove the one that stops it, and any other you did not add.
Remember the other browsers and profiles on the PC. If Remove is missing or greyed out, a policy forces the extension, which the policy step deals with. Windows 11 and Windows 10 show the same pages.

Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Uninstall InstallCore
Open Settings > Apps > Installed apps in Windows 11, or Settings > Apps > Apps & features in Windows 10. Sort the list by install date and find InstallCore, then choose Uninstall from the three-dot menu next to it (in Windows 10, click the entry and then Uninstall).
Remove anything else installed on the same day that you do not recognise, because such programs usually arrive together in one installer. If the uninstaller opens a browser page with an offer or a survey, close it: the program is removed either way.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Reset the browser
Finish the browser part with a reset, which puts the search engine, start page, new tab page and site permissions back to their defaults and switches extensions off. Chrome: Settings > Reset settings > Restore settings to their original defaults.
Edge: Settings > Reset settings. Firefox: Help > More troubleshooting information > Refresh Firefox, which also removes its extensions. Your bookmarks and saved passwords are kept, and the menus are the same on Windows 11 and Windows 10.

Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 4: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
Get rid of InstallCore ads from web browsers on Windows machines with the help of this guide.
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Remove from Google Chrome
If Google Chrome keeps returning you to websites filled with InstallCore ads, it's a clear indication that adware infected your web browser. Th easiest way to get rid of it is to reset default browser's settings.
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Remove from Microsoft Edge
The first phase of the InstallCore removal is the elimination of all malware-related applications.
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Jun 2020 · not reviewed since
PUPs rely on bundling. That's the easiest way to infiltrate machines without being noticed
Adware, browser hijacker, and other PUPs are spread using bundling.
This particular program can be installed manually from its official website. However, most of the downloads are indirect. After that, it may start displaying targeted advertising material and may be used to collect information about users' online activity. Besides, it may start bothering you with annoying advertisements and may also initiate other unwanted activities.
You can find this program on your computer after downloading third-party applications, so you should start monitoring the installation of the freeware and opt-out of optional components that are usually added to them.
For getting the ability to see what is hiding behind the installer of the freeware, you should read the End User License Agreement (EULA), Privacy Policy, and similar information. Besides, select Custom or Advanced installation of the freeware, and then uncheck all checkmarks claimong that you want to install browser-based applications.

From our report of Jun 2020 · not reviewed since
InstallCore ads will be terminated upon adware removal
Technically, InstallCore is not a virus.
Practically, most of the users consider it to be a virus due to extremely aggressive advertising processes. The application generates pop-ups, banners, new tab ads, and other forms of advertisements promoting various commercials.
Alternatively, it may enable push notifications and trigger random web browsers redirects to the websites of its sponsors. Therefore, the only way to clean unwanted content from your web browser is to perform a full InstallCore removal.

Questions about InstallCore ads
What is InstallCore?
InstallCore is a free application launched by ironSource Ltd and promoted as the leading application installation platform for premium publishers. It allegedly claims to improve browsing experience by speeding up software installation.
However, it is recognized as Adware.InstallCore or PUP.Optional.InstallCore by most security vendors. InstallCore is an intrusive adware and potentially unwanted application that may flood web browsers with intrusive commercials, banners, and hyperlinks to gain financial profit from advertising.
Is InstallCore malware?
Technically, InstallCore is not a virus, but practically most users consider it malicious due to its extremely aggressive advertising processes. The application is flagged as a potentially unwanted application and adware by reputable security vendors.
It is known for spying on users with the help of web beacons and tracking cookies. Although not dangerous in the traditional malware sense, the content it brings to users can expose them to irrelevant or even potentially dangerous content including phishing sites.
How does InstallCore get installed?
InstallCore is spread using bundling, a deceptive but legal distribution method. This installer bundles potentially unwanted components with freeware and shareware. Most downloads are indirect through third-party applications.
After installation, it may start displaying targeted advertising material and collecting information about users' online activity. InstallCore can be installed manually from its official website but most infiltrations happen through bundled software installations when users select quick installation modes.
What ads does InstallCore display?
InstallCore generates pop-ups, banners, new tab ads, and other forms of advertisements promoting various commercial content. The ads are intrusive and tend to cover the original content of websites.
InstallCore ads are linked to suspicious third-party websites that may be primarily used for spreading malware or tricking people into paying for various useless subscriptions. The application displays an excessive amount of pop-ups and banners filled with sponsored content. You may experience random web browser redirects to sponsor websites.
Does InstallCore spy on me?
Yes. InstallCore is set to collect data related to your browsing activity including your email address, PC location, IP address, and similar information that can give away your identity.
After collecting the required amount of data and sending it to affiliated parties, the application adapts InstallCore ads according to your preferences to increase the number of clicks. Many people go against the disclosure of their personal browsing information, location, and account details. Security experts agree on the need to remove InstallCore to prevent unwanted data collection.
How do I remove InstallCore?
The easiest way to eliminate InstallCore is using reputable anti-malware software to perform a full system scan. The scan will detect InstallCore and all related components and remove them in one operation.
Alternatively, you can try manual removal by uninstalling related programs from Control Panel, but this is more difficult and may miss components. After removal, InstallCore ads will be terminated and you will stop receiving intrusive advertisements. Third parties will no longer be capable of spying on your web browsing activities as easily.
Why does InstallCore keep reappearing?
InstallCore may reappear if you have not completely removed all associated programs and files. The adware can have numerous extra components which support its malicious activity and might disguise under unrelated names. Manual removal often misses hidden components, causing reinstallation.
Some programs still bundle InstallCore into their installers. To prevent reappearance, use reputable anti-malware software for complete removal, monitor your installed programs regularly, and select Custom or Advanced installation options for new software to avoid reinstallation.
How do I prevent InstallCore installation?
Select Custom or Advanced installation of freeware, then uncheck all checkmarks claiming you want to install browser-based applications. Read the End User License Agreement (EULA) and Privacy Policy to identify bundled software before installation.
Start monitoring the installation of freeware and opt-out of optional components that are usually added. Do not choose Recommended or Quick installation modes as these hide optional components. Download software only from official websites and authorized distributors, never from suspicious third-party websites.
Will Fortect remove InstallCore?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For InstallCore, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Sophos: https://www.sophos.com/en-us/threat-center/threat-analyses/adware-and-puas/Install%20Core/detailed-analysis.aspx (read October 5, 2026)
- Toms Guide: Mac Adware Trojan Can Install Anything on OS X (read October 5, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 5, 2026)
- FTC: How to recognize, remove and avoid malware (read October 5, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 5, 2026)