If ads keep appearing outside the websites or apps you chose, an unwanted program may be putting them there. Ordinary website ads stay on the pages that show them; unexpected ads can appear across your device. They may interrupt browsing, cover a screen, or open unfamiliar websites.
You can check recent apps, browser settings, and security tools to find the cause. The right steps depend on whether you use Windows, Android, a Mac, an iPhone, or a particular browser. Start with changes you can connect to the ads, rather than deleting files at random.
Some advertising is part of software you chose, while other ads may come from an unwanted app or extension. Not every pop-up means malware has reached your device, but repeated changes deserve attention. Start by noting when the ads began and which device or app shows them most often.
Key Takeaways
- Ads outside the websites or apps you chose may come from unwanted software.
- One symptom alone does not prove that a device has an infection.
- Review recent apps and browser add-ons before changing system files.
- Run a security scan if the ads continue after you remove a suspect app.
- Use official support channels when device symptoms persist.
What Is Adware, and How Does It Differ From Malware?
Adware is software that automatically displays advertisements, often in a browser or app. Some ad-supported software is legitimate when you knowingly agree to its ads. Consent and behavior help show whether an app is expected or unwanted.
A PUP, or potentially unwanted program, is software that may be installed or behave in ways you did not intend, without necessarily being malicious. PUA means potentially unwanted application. Adware can be a PUP, but not every ad-supported app is malicious.
| Type | Consent | Typical behavior |
|---|---|---|
| Consented ad-supported software | User agrees | Ads appear as part of the software |
| PUP adware | User may not knowingly agree | Unwanted ads or bundled software |
| Malicious adware | No meaningful consent | May redirect or lead to other malware |
Ads that come with software you knowingly chose differ from ads forced onto your device without meaningful consent.
Malware is software used to gain unauthorized access to IT systems to steal data, disrupt services, or damage networks. CISA explains this in its guide to malware, phishing, and ransomware.
Consented ad-supported software
Some programs offer a free version supported by ads. The ads may appear inside that program, and the terms explain the trade-off. That setup does not make the software a virus or prove that it is unsafe.
A computer virus is a type of malware that can copy itself by attaching to files or programs. Adware has a different main purpose: it delivers ads. Some adware may still come with other unwanted programs or carry out harmful actions.
Unwanted or malicious adware
Adware becomes more concerning when an app arrives without clear permission, changes settings, or shows ads outside its expected place. A program may still open and work while acting in ways you never approved.
Review the program’s name, how it reached your device, and what it changes before deciding what to remove. Treat unexpected installation or behavior as a reason to investigate, even when the program itself still works.
Can Adware Put Your Privacy or Device at Risk?
Adware can be a nuisance, but tracking or redirects can raise the risk beyond annoyance. The danger depends on what the software collects, changes, or installs. Some adware tracks browsing history, searches, or location to target ads.
Spyware is designed to monitor or collect information, while adware’s central behavior is delivering ads. Some programs can do both. Adware may also redirect you to unfamiliar websites, exposing browsing information to third parties.
Adware is dangerous when its behavior puts your data or device at risk. Some ad systems use PPC, or pay-per-click, PPV, or pay-per-view, and PPI, or pay-per-install, to earn money from ad activity or installs.
Those payment models do not prove that a program is harmful, but they help explain why some software pushes ads aggressively. Watch for these possible consequences:
- Unwanted tracking of your browsing activity or location.
- Browser redirects to unfamiliar or deceptive websites.
- Exposure to additional malware through an ad or download.
An ad can lead to a page that imitates a trusted service or asks you to install another program. A redirect may also send you through several pages before showing its final destination.
Close an unexpected page instead of following its prompts. Do not enter passwords or payment details on a page reached through an unexpected redirect.
What Are the Signs of an Adware Infection?
A new wave of pop-ups combined with browser changes is more concerning than one ordinary ad. Look for several changes that began around the same time. A single symptom does not prove an infection.
Three common computer warning signs are unexpected pop-ups, unfamiliar homepage or search changes, and new extensions or toolbars. Other clues include redirects, slow performance, and crashes.
| Area | Possible signs | Concrete example |
|---|---|---|
| Computer | Slow performance or crashes | The device slows after unfamiliar software appears |
| Browser | Redirects or changed settings | The homepage changes without you changing it |
| Phone | Pop-ups, battery drain, or data use | Ads appear outside the recently installed app |
Signs on a computer or browser
Check whether your homepage or search page changed without your input. A new toolbar or extension can also point to a program that changed browser behavior.
Repeated redirects may send you to websites you did not choose. A computer that slows down or crashes after unfamiliar software appears gives you another reason to review recent changes.
A university cybersecurity guide from SDSU describes warning signs such as unexpected ads, browser changes, slow performance, and crashes. Those clues can also have other causes, so compare them with recent installs.
For example, a browser may change after you install a toolbar, while a crash could come from a separate system issue. The timing and combination of changes matter more than one event.
Signs on a phone
On a phone, note apps you do not remember adding, ads outside the app you just opened, and battery drain. Unexplained data use can be another clue when it starts with other changes.
Compare the timing with app installs or updates. Write down which symptoms happen and when, so you can compare them with recent installs.
How Does Adware Get Onto a Device?
Adware commonly arrives alongside something you meant to install. Freeware and shareware may include extra software in their setup steps. Free software is not automatically adware.
Bundled installs can hide optional programs in setup screens or preselected boxes. A rushed click can add software you did not mean to choose, even when the main program works as expected.
Malicious websites may also use browser vulnerabilities to trigger downloads. A drive-by download is a download that starts through a website interaction or flaw, rather than a clear choice to install software.
A visit to a website alone does not prove that your device has an infection. Some attacks depend on a browser weakness, while others still need a user to click or approve something.
Common entry routes include:
- Freeware that bundles optional programs.
- Shareware that offers extra software during setup.
- Deceptive apps or browser extensions.
- A malicious site exploiting a browser vulnerability.
Setup screens deserve a close look, especially when they offer several extra tools. Before installing a free program, review every setup screen for extra apps or preselected options.
What Is Adware and How Do You Remove It? Windows Cleanup Steps
On a Windows PC, begin with the suspicious app or program that appeared around the time the ads started. Review recent installs, remove only software you recognize as unwanted, and run a malware scan. Save your work first before using any scan that restarts the computer.
Do not delete unfamiliar system files to remove adware. Removing the wrong file can cause Windows or another program to stop working.
Uninstall suspicious programs and review the system
Open Settings in Windows and review installed apps or programs, focusing on items added when the ads began. Uninstall only software you recognize as unwanted, such as a recent app you did not mean to install.
Close open programs and save files before scanning. Then use Windows Security for a malware scan, which can detect and help remove unwanted software.
After the scan, restart the computer and check whether the ads return. If the symptoms continue, review the remaining recent installs instead of removing system files by guesswork.
Run Microsoft Defender Offline
Microsoft Defender Offline scans from outside the normal Windows kernel, the core layer that helps run Windows. As of 2026, this separate environment can help find rootkits, a kind of threat that can hide deep in a system.
To start the scan, open Windows Security, choose Virus & threat protection, then Scan options. Select Microsoft Defender Offline scan and choose Scan now.
The scan takes about 15 minutes and restarts the device. Save files and close programs first, because the restart may interrupt open work.
Microsoft Defender Offline supports x64 Windows 11 and x64 or x86 Windows 10. It does not support ARM Windows 11 or ARM Windows 10.
If BitLocker protects the system drive, suspend BitLocker protection before scanning. Otherwise, Windows may ask for a recovery key after the restart.
Windows Recovery Environment must be enabled for the offline scan. Open Command Prompt as an administrator and enter reagentc /info to check its status.
If the environment is disabled, enter reagentc /enable in the same tool. Confirm that the Windows Recovery Environment is enabled before you start an offline scan.
How Do You Uninstall Adware on Android?
If pop-ups disappear in Android Safe Mode, a third-party app is a likely place to investigate. Safe Mode runs core system apps instead of third-party apps. The test points to an app, but does not identify which one.
Remove recent apps one at a time when the cause is unclear. Check whether a new app’s permissions fit what it does, then use Google Play Protect to scan for harmful apps.
Use Safe Mode to identify a troublesome app
Safe Mode gives you a simple test: if the pop-ups stop, a third-party app may be causing them. If ads continue, the source may be a browser setting or another issue.
Menu names and the steps for entering Safe Mode differ among Android devices. Check your device’s instructions if the usual button or power-menu method does not work.
Google recommends removing recently downloaded apps one at a time in Safe Mode, then restarting to test the result. Its Android guidance for unwanted ads also recommends checking that Play Protect is on.
Remove the app and check for remaining symptoms
Review apps added around the time the ads began. To check permissions, open Settings > Apps, select an app, and choose Permissions.
Use this five-step process:
- Enter Safe Mode using your device’s instructions.
- Note whether the pop-ups stop in Safe Mode.
- Uninstall the recently added suspect app.
- Run Play Protect from its screen in the Play Store.
- Restart the device and check whether symptoms return.
Play Protect can scan for harmful apps, but a clean result does not identify the cause of every ad. If the cause is unclear, remove apps one at a time so you can see which change stops the ads.
How Do You Clean Adware From a Mac or iPhone?
On a Mac or iPhone, start by checking whether the ads began after a new app or extension appeared. A single ad in one app does not prove that the whole device has adware. Look for a clear link between the new item and the change.
Remove only apps and extensions you do not recognize or trust. Keep system files in place, since deleting them can create new problems.
Review unfamiliar apps and extensions on a Mac
Open Finder and check the Applications folder for unfamiliar apps. Review Safari extensions in Safari settings, then remove only items you do not recognize or trust.
Update macOS and restart the Mac as practical first checks. If the ads happen only in one browser, note that pattern before changing other settings.
Some apps show ordinary ads as part of their service. Compare where the ads appear with the app or extension that recently changed, rather than treating every ad as an infection.
Check apps and browsing behavior on an iPhone
On an iPhone, review recently installed apps and remove ones you do not recognize. Notice whether unexpected ads appear in Safari or only inside one app.
Ads confined to a single app may come from that app’s own content. Ads that appear in Safari can point to a browser issue, but do not prove that adware is installed.
A single scan or setting change cannot guarantee that every cause is gone. If removing an unfamiliar item does not stop the symptoms, seek help through Apple’s support channels rather than deleting system files.
How Do You Remove Adware From a Browser?
If ads appear only in one browser, check that browser’s extensions and site settings first. Remove unfamiliar extensions, restore a changed homepage or search setting, and reset browser settings if changes persist. Keep the fix focused on the browser showing the problem.
Blocking pop-ups does not uninstall an app that generates ads elsewhere. Browser settings can limit some interruptions, but they cannot remove a separate program from your device.
| Browser | Where to check | Action |
|---|---|---|
| Chrome for Android | Settings > Site settings > Pop-ups and redirects | Block pop-ups and redirects |
| Firefox | Add-ons or Extensions | Remove an unfamiliar extension |
| Safari | Safari settings > Extensions | Turn off or remove an unfamiliar extension |
Browser notifications can also create alerts that look like pop-ups. If alerts come from a website, turn off that site’s notifications separately from removing extensions.
After changing a homepage or search setting, open a fresh browser window to check the result. Turn off notifications from unfamiliar websites separately from removing extensions.
How Can You Check for Related Privacy Risks?
Personalized ads can be unsettling, but they are not by themselves proof that unwanted software is installed. Ad personalization settings control how ads are tailored, not whether an unwanted app is present. Those are separate checks.
iPhone Safety Check reviews sharing and access, not adware. On iPhones running iOS 16 or later, find it at Settings > Privacy & Security > Safety Check.
Safety Check lets you review or stop sharing information with people and apps, check connected Apple Account devices, and reset app privacy permissions. Emergency Reset stops sharing with all people and apps at once.
Manage Sharing & Access lets you review individual sharing and access settings. Choose that option when you want to check specific people or apps instead of ending all sharing.
On Android, find ad controls at Settings > Google > All services > Privacy & security > Ads > Ads privacy. Android Ads privacy settings let you turn off ad topics, app-suggested ads, and ad measurement separately.
Android can share up to three ad-interest topics with an app at a time and deletes those topics after four weeks. These controls affect ad personalization, not the presence of an unwanted app.
Use Emergency Reset only when you need to stop sharing with all people and apps at once.
How Can You Prevent Another Adware Infection?
The best prevention is to slow down before installing software or approving a request you did not expect. A rushed click can add a program or grant access without a clear reason. Pause at each prompt.
Official app stores can lower risk, but they do not guarantee every app is safe. Google Play and Apple’s App Store are official sources, yet you should still review an app’s permissions and purpose.
Use these habits to reduce the chance of installing unwanted software:
- Install operating-system and app updates.
- Download software from trusted sources.
- Read setup screens and permission requests.
- Avoid suspicious links and fake warning pop-ups.
Setup screens can offer extra programs beside the software you wanted. Read each option and skip add-ons that you did not choose.
Check an app’s permissions before you approve them, especially when the request seems unrelated to its purpose. For browser add-ons, review their permissions, performance, and usefulness after installation; this guide to Chrome extensions compares tools and explains what to check.
A scareware message may claim that a threat has been found and urge you to install a tool or call a number. That warning alone does not prove your device is infected.
An official app store lowers risk, but it cannot guarantee that every app is safe.
Keep a note of the app or download that preceded the problem, so you can avoid the same source next time.
Conclusion
Unexpected ads are a reason to check what changed, not a reason to panic. Ads can come from an app, an extension, or a browser setting, while consented advertising is not automatically malicious.
Choose one next step that fits your device. Review the newest unfamiliar app or extension first, then run a trusted security scan if the symptoms continue.
Start by removing or reviewing the most recent unfamiliar app or extension, then use a trusted security scan if the symptoms continue.
FAQ
Is adware illegal?
Adware is not always illegal; legality depends on consent, deceptive installation, and the conduct involved. Laws differ by jurisdiction. Software that clearly explains its ads and gets your agreement may be treated differently from software installed through deception or used to commit another offense. If you face a specific legal problem, local law and the details of what happened matter.
Can you get rid of adware?
Yes, you can usually get rid of adware by uninstalling the app or extension responsible and running a security scan. Check whether the ads return after restarting the device. If they continue, another app, browser setting, or program may be involved. Persistent symptoms or changes you cannot reverse may call for help from a trusted device support professional.
How do you tell if you have spyware?
Unfamiliar apps, unexplained data use, or unusual account activity can be clues, but no single sign confirms spyware. Look for several changes that began around the same time, and review recent installs and account access. Spyware is designed to monitor or collect information, so unexpected permissions or activity deserve a closer check. A malware scan can help find harmful software.
Can someone spy on your phone without having your phone?
Yes, remote access can happen through a compromised account or app, even when someone does not hold your phone. Pop-ups alone do not prove that anyone is spying. Secure your accounts with new, unique passwords, review connected devices, and check which apps can access sensitive data. If you see account activity you did not make, use the service’s account recovery and security tools.
Can adware steal my passwords?
Adware may track browsing or arrive alongside spyware and other malware, but ads alone do not show that your passwords were taken. Avoid entering login details on pages opened by unexpected redirects. If you entered a password on a suspicious page, change it through the service’s official app or website and review recent account activity. Use a different password for each account.
Will blocking pop-ups remove adware?
No, blocking pop-ups does not remove an app or extension that generates ads. The browser setting can reduce interruptions and redirects inside that browser, but ads may continue elsewhere on the device. Find and remove the responsible program or extension, then run a security scan if the symptoms persist. Turn off website notifications separately when those alerts are the issue.
