Cybersecurity & privacy guides for everyoneThursday, October 22, 2026
Threats & Malware

Adware, PUPs and Browser Hijackers: What They Are

By Digitals Innovation Editorial Team · Updated Oct 21, 2026 · 5 min read
Adware, PUPs and Browser Hijackers: What They Are

Adware shows unwanted advertising, a potentially unwanted program (PUP) is software you technically agreed to install but would not want, and a browser hijacker changes your browser settings to redirect searches. They are less destructive than ransomware but still invade privacy, slow devices and open the door to worse threats.

Three related nuisances

  • Adware: displays pop-ups, banners or injected ads, and may track browsing to target them.
  • PUPs: bundled extras such as toolbars, fake optimizers or search tools that come with other software, often disclosed only in fine print.
  • Browser hijackers: alter the homepage, new tab page and default search engine, usually to funnel traffic through an ad-supported search page.

The boundary with outright malware is thin. Some of these programs collect browsing data, and others install additional components without clear consent.

How to tell if a program is a PUP

Warning signs include installers that bundle extras without clear explanation, programs claiming to speed up or clean your computer for a fee, tools that change your search engine, and uninstallers that leave components behind. Check the reputation of the developer and read independent reviews. If the product name appears in results alongside words like remove or uninstall, that is often a clue that many people are having trouble getting rid of it.

How they get installed

  • Bundled with free software through pre-ticked options during installation.
  • Fake download buttons on software sites.
  • Misleading pop-ups claiming your device is infected or needs an update.
  • Malicious or low-quality browser extensions.
  • Pirated programs and game cheats.

Why they exist

These programs make money from your attention. Adware earns revenue from ads shown or clicked. Hijackers earn from search partnerships when traffic goes through their pages. Some PUPs sell information about your browsing habits. Because the revenue depends on installation numbers, developers pay to be bundled with popular free programs, and installers are designed so that declining is awkward. Understanding the business model helps you recognize the pattern: if something is free and pushy, you may be the product.

Symptoms

  • Ads appearing in unusual places, including outside the browser.
  • Homepage or search engine changed and reverting after you fix it.
  • New toolbars, extensions or shortcuts.
  • Redirects to unfamiliar sites when searching.
  • Slower browsing or device performance.
  • Programs you do not remember installing.

How to remove them

  1. Open the installed programs list and uninstall unfamiliar or recently added software.
  2. Open the browser’s extensions page and remove anything you did not choose.
  3. Reset browser settings, then set your preferred homepage and search engine.
  4. Check for permission to show notifications, and revoke it for sites you do not know.
  5. Run a full scan with reputable security software and an on-demand anti-adware or anti-malware tool.
  6. Check shortcuts to the browser, because some hijackers add extra text to the target.
  7. Restart and confirm the changes did not return.

If settings keep reverting, something is still running. Look at startup items and scheduled tasks.

Mobile and notification spam

On phones, similar behavior appears as constant full-screen ads, notification spam and apps that open advertising pages. Go to the app list and remove recent unfamiliar apps. Open the notification settings of the browser and revoke permission for any site you do not trust. Check default apps and search settings, and install updates. Official stores filter many such apps but not all, so read reviews and check what permissions an app wants before installing.

Cleaning up stubborn cases

If settings keep returning, look for a policy or extension forcing them. On Windows, check the list of browser policies and scheduled tasks. Remove unknown profiles from the browser, reinstall the browser from the official site if necessary, and run an on-demand scanner. As a last resort, create a fresh browser profile and sync only bookmarks you trust.

How to avoid them

  • Download software from the developer’s official page or a trusted store.
  • Choose custom or advanced installation, and uncheck optional extras.
  • Ignore pop-ups that claim you must install something to fix a problem.
  • Install only the extensions you need, from official stores, and review their permissions.
  • Keep your browser updated and use its built-in protection against dangerous sites.
Tip: If an installer hides the option to decline an extra, treat that as a reason to stop and look for another source.

Teaching family members

Relatives often install the most bundled software without noticing. Show them how to spot custom installation options, how to read each screen, and where official download pages are. Suggest adding a reputable ad blocker and leaving a short note about who to ask before installing something. Patience works better than blame.

Treat these nuisances seriously but calmly. They are usually easy to remove if caught early, and avoiding them largely comes down to downloading carefully and keeping your browser tidy.

Frequently asked questions

Is adware a virus?

Not technically. Adware does not necessarily replicate or damage files. It is still unwanted software and may track you or lead to further infection.

Why does my search engine keep changing?

A browser hijacker or leftover extension, scheduled task or policy is likely resetting it. Remove the source rather than just changing the setting.

Are free programs dangerous?

Many are perfectly fine, but free software is the most common carrier of bundled extras. Use official sources and read each installation screen.

Key takeaways

  • Adware, PUPs and hijackers are unwanted but often privacy-invasive.
  • They spread through bundled installers and fake download buttons.
  • Remove programs, extensions and reset browser settings.
  • Use custom install and trusted sources.
DI
Digitals Innovation Editorial Team
We turn security jargon into steps you can follow. Guides are researched, reviewed and updated as threats and tools change.

Related guides