Short Bio

PUP.Optional.InstallCore is the detection for a large family of bundlers that are known to install adware and potentially unwanted programs (PUPs) with legitimate applications. The company behind InstallCore is ironSource, a company that builds monetization, engagement, analytics, and discovery tools for app developers, device manufacturers, mobile carriers, and advertisers. InstallCore is available for Windows and Mac systems. The main goal is to get paid by the adware distributors for each successful install and for any
shown advertisements.

Common infection method

InstallCore comes bundled together with third-party applications. The bundle installer is usually downloaded and executed by the users themselves, often unaware. They are offered up on
software download sites, where people look for software they need.

Avoidance advice:

  • Be vigilant when installing third-party applications.
  • Scan the download with Malwarebytes Anti-Malware prior to installation.
  • If you have found the software that you need or want, check if the software can be downloaded directly from the publisher’s site or another site that you trust or know not to use any bundlers.
  • Follow PUP avoidance practices.


Malwarebytes can remove these threats without further user interaction. If the application has been run on the affected computer , you can expect to find more detections for adware and potentially unwanted programs.

Associated threats

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language