Wave Browser was showing up on client machines when we first wrote about it in 2022, and almost nobody remembered installing it. 4 years later, security vendors still flag it as unwanted software, and it still arrives the same way: hidden inside something else you downloaded. Here’s how it gets in, and what it takes to get it back out.

What Wave Browser actually is

Wave Browser is a Chromium-based web browser, built on the same engine as Chrome and Edge, and marketed as customizable and secure. The problem is how it arrives. Security vendors classify it as a potentially unwanted program, or PUP: software that installs without clear consent, usually by riding along inside another download. It isn’t a virus in the classic sense, but it sets itself as your default browser and adds itself to startup without ever asking, and that’s reason enough to want it gone.

Two habits make it harder to shake than a normal program. First, it installs into your user profile rather than the Program Files folder, so it never has to ask an administrator’s permission on the way in. Second, removal guides from the major security vendors report that it leaves scheduled tasks behind: small Windows entries that can relaunch or restore it after an uninstall that didn’t go deep enough. Neither trick is exotic, but between them they’re the reason the removal steps below go past the uninstall button.

How it shows up uninvited

Security vendors who track Wave Browser point to one route over and over: bundled downloads. You go looking for something free, like a PDF converter or a “driver updater,” and the installer carries passengers. Somewhere in the fine print sits a pre-checked box, and clicking Next a little too quickly is all it takes. Download portals that wrap software in their own installers are the worst offenders. Fake “your video player needs an update” pop-ups are another common door.

The first sign is usually a new icon on the desktop, or links suddenly opening in a browser you don’t recognize. A home page or search engine you never picked is another giveaway.

How to remove it, step by step

On a Windows machine, work through these in order:

Uninstall it. Open Settings, then Apps, then Installed apps. Find Wave Browser, choose Uninstall, and follow the prompts all the way through. It may ask more than once. If it isn’t listed, don’t assume you’re in the clear; carry on with the remaining steps anyway.
Check your startup list. Right-click the taskbar, open Task Manager, and look at the Startup apps tab. Disable anything with Wave in the name.
Clear its scheduled tasks. Press the Windows key, type Task Scheduler, and open it. Select Task Scheduler Library on the left, scan the list for entries with Wave in the name, right-click each one, and choose Delete. This is the step most people skip, and it’s the one that keeps the program from coming back.
Delete the leftover folder. In File Explorer, type %localappdata% into the address bar and press Enter. If a WaveBrowser folder is still sitting there, delete it and empty the Recycle Bin.
Take back your default browser. In Settings under Default apps, set Chrome, Edge, or Firefox as the default again.
Reset the browser you actually use. Remove any extensions you don’t recognize, set your preferred search engine and home page back, and turn off notification permissions for sites you never approved.
Run a malware scan. A reputable scanner will catch leftover files and whatever else the bundle brought along. In our own work we run ThreatDown by Malwarebytes, and our OneStop Plus and Ultimate members have it running year-round.

You don’t need special software for any of this, just the patience to work through all 7 steps. A program like this counts on people stopping after the first one.

How to tell the removal stuck

Restart the computer and pay attention to what opens. Your chosen browser should launch when you click a link, and nothing with Wave in the name should appear in Task Manager. Then check again the next day: open Installed apps and confirm Wave Browser hasn’t returned, and confirm your default browser is still the one you set. If it comes back, a scheduled task or a second bundled program survived the first pass.

The pop-ups are the bigger worry

Wave Browser itself is more nuisance than catastrophe. The company it keeps is the real concern. In our own cleanup work, the steady stream is malicious pop-ups and fake virus warnings: full-screen alarms that claim your computer is infected and refuse to close. When we clean those up, we go after whatever is generating them, install an ad blocker, and shut off the browser notifications that keep the noise coming.

The dangerous version of that pop-up displays a phone number and urges you to call it. Don’t. The caller’s goal is to talk you into granting remote access to “fix” the problem, and the cases we see often end with a legitimate remote-control tool called ScreenConnect quietly installed so the scammer can return to the machine whenever they like. We find it and remove it. If you’ve already made a call like that, disconnect the computer from the internet and stay off your bank accounts until the machine has been checked.

When the machine needs a proper cleanup

If Wave Browser reappears after you remove it, that’s your cue to stop and get help. Software that arrives in a bundle rarely travels alone, and pop-ups that continue after the uninstall, or other programs you never installed, mean the bundle dropped more than one passenger. Chasing each piece by hand can eat an afternoon.

This is routine work for our virus removal service. We find what the bundle left behind and clear out all of it, down to the pieces with names you’ve never heard of. Your files and photos survive in almost all cases; a full wipe-and-reload is rare. Remote sessions typically run 30 to 60 minutes, with a 30-minute minimum at $80, and we support clients by phone and remote nationwide. Full rates are on our pricing page.

Keeping bundles out from the start

One habit prevents most of this: download software only from the maker’s own website, and read each installer screen before you click Next. When an installer offers an express setup and a custom setup, pick custom, because the express path is where the pre-checked extras hide. Declining a pre-checked box takes 2 seconds, which is a lot less of your day than untangling a hijacked browser afterward.

Search results deserve the same caution. The top results for free software are often ads for download portals rather than the maker’s own site, and portals are where wrapped installers live. Scroll past the ads to the real domain, or type the address directly if you know it.

And if a web page announces that your video player is out of date or your machine is infected, close the tab. Real update prompts come from the software itself, not from a page you happened to be visiting. If you’re stuck partway through the removal, or you suspect the bundle brought more than a browser, get in touch and we’ll sort it out.

What is Wave Browser and should you remove it?