What is adware?
Adware is software whose main job is to show advertising the user did not ask for, usually in the web browser and sometimes on the desktop. Many adware products count as a potentially unwanted program (PUP) rather than outright malware, because the installer technically asked for consent, often in fine print or a pre-checked box. Other variants behave like malware: they hide, resist removal, inject ads into every page and collect browsing data. Either way, the user did not knowingly choose it, and it weakens both privacy and trust in the system. Once the browser starts redirecting, the user may also land on scam pages and fake installers that deliver worse threats.
How adware gets installed
- Bundled installers: a free utility offers "recommended" extras such as a toolbar, a new search provider or a "system optimizer." Clicking through an express install accepts them.
- Third-party download sites that wrap the real installer in their own downloader with extra offers.
- Fake update prompts: a web page claims the browser or a video codec is out of date.
- Browser extensions that request permission to read and change data on all websites, then inject ads or rewrite links.
- Notification abuse: a site tricks the user into clicking Allow on a notification prompt and then pushes ad notifications to the desktop. Nothing was installed, but users report it as adware.
Signs and symptoms
- Pop-ups and new tabs across many sites, sometimes even when the browser seems closed
- Homepage, new tab page or default search engine changed without consent, and changes that come back after you fix them
- Redirects to unfamiliar search or shopping sites
- New toolbars or extensions that nobody remembers adding
- Desktop notifications from unknown websites
- Slow browsing, high browser CPU use or a loud fan during light work
- Fake "your PC is infected" pages that push a download or a support phone number (rogue security software, also called scareware)
These symptoms overlap with harmless causes such as a heavy web page or too many extensions, so confirm the source before removing anything.
Removal
- Confirm the symptom and which browser and user profile are affected.
- Check recently installed programs and recently added extensions; the newest items are often the cause.
- Uninstall unwanted programs, remove suspicious extensions and revoke notification permission for unknown sites.
- Scan with up-to-date anti-malware. In Windows Security, reputation-based protection includes blocking of potentially unwanted apps.
- Reset the browser if settings keep reverting, and check proxy and DNS settings, which some adware changes.
- Reboot and verify that pop-ups and redirects stay gone. If browser sync keeps restoring a bad extension, remove it from every synced device.
- Document what you removed and show the user how it got in.
Prevention
Download software from the vendor's site or an official store, choose Custom or Advanced setup and decline extra offers, run daily work from a standard user account so installs need approval, keep browsers updated, restrict extension installs by policy on business devices, and deny notification prompts from unfamiliar sites.
Adware vs. similar threats
| Type | Main behavior | How it shows up |
|---|---|---|
| PUP | Umbrella term for software the user did not really intend to install | Varies; adware is one kind of PUP |
| Adware | Shows ads and steers browsing for ad revenue | Loud: pop-ups, redirects, toolbars |
| Spyware | Secretly monitors activity and collects data | Quiet: few visible signs, privacy and account loss |
| Trojan | Poses as legitimate software to deliver a hidden payload | Depends on the payload, often a backdoor |
Adware on the CompTIA A+ exam
Adware is one of the malware types in Core 2 (220-1202) objective 2.4, which also covers detection, removal and prevention, and its symptoms show up in objective 3.4 on PC security issues such as pop-ups and browser redirection. If a scenario says pop-ups and a changed homepage started right after the user installed a free PDF converter, think adware or PUP: uninstall the program, remove extensions, scan and reset the browser. If a pop-up shows a phone number to call for "support," it is a scam; close it and never call.