Short bio

PUP.Optional.InstallCore is the detection name for InstallCore, a bundler that installs more than one application on the user’s computer, usually by combining a popular title with one or more adware. The company behind InstallCore is ironSource, a company that builds monetization, engagement, analytics, and discovery tools for app developers, device manufacturers, mobile carriers, and advertisers. InstallCore is available for Windows and Mac systems.

The main goal is to get paid by the adware distributors for each successful install and for any shown advertisements.

More information about this PUP can be found here:


Common infection methods

InstallCore comes bundled together with third-party applications. The bundle installer is usually downloaded and executed by the users themselves, often unaware. They are offered up on software download sites, where people look for software they need.

Avoidance advice:

  • Be vigilant when installing third-party applications.
  • Scan the download with Malwarebytes Anti-Malware prior to installation.
  • If you have found the software that you need or want, check if the software can be downloaded directly from the publisher’s site or another site that you trust or know not to use any bundlers.
  • Follow PUP avoidance practices.


Malwarebytes completely removes this threat. No further clean up is required.

For additional removal assistance, please follow this guide:

Associated threats

  • PUP.Optional.InstallCore.A


Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language