Adware.InstallCore is an adware that is compatible with all the latest Windows OS versions and most popular web browsers. Adware.InstallCore can therefore embed itself in your Chrome, Firefox, Edge or other mainstream browsing program.


Multiple antivirus programs detect Adware.InstallCore Virus

Adware like Adware.InstallCore are not inherently malicious or dangerous pieces of software. Unlike viruses and the like, adware do not aim to corrupt your system, steal sensitive data or otherwise undermine your safety and security on the web. That is to set aside any such concerns that you may have right off the bat. In fact, it’s actually very common for users to assume that they’ve been infected with a virus when they encounter such applications. And that is mainly due to the rather aggressive behavior that adware like Adware.InstallCore tend to demonstrate in users’ browsers.

For example, the most in-your-face symptom of a adware infection is the appearance of vast quantities of online ads. These range from popups and banners to box messages and colorful links that fill every otherwise plain text. Adware like PUA InstallCore, Prozipper, Js/Adware.Agent.AW can also launch spontaneous page redirects to various sponsored locations on the web in order to boost the traffic count of certain websites.

Another fairly obvious symptom of a adware being present in your system is noticing changes to your browser’s configurations that weren’t made by you. For instance, Adware.InstallCore may set a new browser homepage and may also change the default search engine – to name a few.

But the panic usually sets in when you decide to switch back to your old configurations. Because the second your restart your web browser, Adware.InstallCore will reinstate its own settings and that can easily make you believe that there’s something terribly wrong happening.

Luckily, that’s not entirely so and this issue is easily solved by removing the adware that’s bothering you. Only the process itself isn’t as straightforward and intuitive as it is with most regular software applications. That is so because of the developers of this type of programs usually don’t care much for your desire to rid yourself of their product. Instead, they have a vested interest in it remaining on your PC for as long as possible, because that is how they earn revenue (from the paid ads).

In fact, you may have already tried to delete Adware.InstallCore on your own, only to find that it magically reappears on your computer again. That is due to the fact that leaving any residual components allows it to reinstall itself. And this, in turn, is why we have designed a special removal guide to aid you in completely uninstalling the annoying ad-generating piece.

This will also be beneficial to your system’s security in the long run. There is a possibility of running into dangerous forms of malware like Trojans and ransomware if you happen to be automatically redirected to, say, some insecure website or a page that’s been compromised by hackers. Hence, there’s really no benefit to allowing Adware.InstallCore to remain on your computer for any longer than it already has.


Name Adware.InstallCore
Type  Adware
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms  Changes to the main browser’s configurations made without your consent, sudden page redirects during browsing sessions and an increased number of online ads visible on all visited sites. 
Distribution Method Usually with the help of program bundles that can be distributed for free on various open source download platforms. 
Detection Tool

Remove Adware.InstallCore Virus

To try and remove Adware.InstallCore quickly you can try this:

  1. Go to your browser’s settings and select More Tools (or Add-ons, depending on your browser).
  2. Then click on the Extensions tab.
  3. Look for the Adware.InstallCore extension (as well as any other unfamiliar ones).
  4. Remove Adware.InstallCore by clicking on the Trash Bin icon next to its name.
  5. Confirm and get rid of Adware.InstallCore and any other suspicious items.

If this does not work as described please follow our more detailed Adware.InstallCore removal guide below.

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result
Adware.InstallCoreAVG AV

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:


If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.


Adware.InstallCore  Remove Adware.InstallCore from Internet Explorer:

Open IE, click  Adware.InstallCore —–> Manage Add-ons.


Find the threat —> Disable. Go to Adware.InstallCore —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

Adware.InstallCore Remove Adware.InstallCore from Firefox:

Open Firefoxclick  Adware.InstallCore  ——-> Add-ons —-> Extensions.


Find the adware/malware —> Remove.
Adware.InstallCoreRemove Adware.InstallCore from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:


Rename it to Backup Default. Restart Chrome.


Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


About the author


Violet George

Violet is an active writer with a passion for all things cyber security. She enjoys helping victims of computer virus infections remove them and successfully deal with the aftermath of the attacks. But most importantly, Violet makes it her priority to spend time educating people on privacy issues and maintaining the safety of their computers. It is her firm belief that by spreading this information, she can empower web users to effectively protect their personal data and their devices from hackers and cybercriminals.

Leave a Comment