How to completely remove a virus from an Android phone for free - without registration and SMS

Viruses on Android smartphones are a problem that every fifth user faces. They slow down your device, show annoying ads, steal data, or even block access to the system. The main difficulty: most “free” antiviruses require registration, subscription, or sending SMS to short numbers. But there are effective cleaning methodsthat will not require a penny and will not leave traces in your personal data.

This article contains only proven methods for removing viruses from Android devices any manufacturers (Samsung, Xiaomi, Honor, Realme, etc.) without installation questionable software. We will look at how to determine the type of infection, which system tools to use first, and why reset to factory settings is not always the best solution. All instructions are adapted for Android 10–14 and do not require root access.

Signs of infection: how to understand that there is a virus on your phone

Viruses on Android rarely behave obviously. Instead of the inscription “Your phone is infected!” they masquerade as system processes or legitimate applications. Here key symptomsthat should alert you:

• 📱 Spontaneous installation of applications -games or utilities that you have not downloaded appear in the menu (often with names like “System Update” or “Flash Player”).
• 💸 Money write-offs — SMS to short numbers, payments for unknown services or suspicious transactions on bank cards linked to Google Pay.
• 🔋 A sharp reduction in time work —the battery runs out in 2-3 hours even in standby mode (the virus can mine cryptocurrency in the background).
• 📶 Suspicious traffic —the mobile data “flies away” in a few hours, although you hardly used the phone.
• 🚫 Blocking screen —windows appear demanding payment (“Your phone is blocked by the FSB/police”) or the inability to unlock the device.

Especially dangerous Trojan-Banker.AndroidOS —it intercepts SMS with confirmation codes from banks. If you notice at least 2-3 signs from the list, You need to act immediately. But first, it is important to determine the type of virus.

Types of viruses on Android: what exactly infected your phone

Not all malware is equally dangerous. Some simply show ads, others steal data or blackmail users. Here main categories with examples:

Type of virus	How it manifests itself	Examples	Danger level
Adware	Intrusive advertising, browser redirection, pop-up banners	HiddenAds, Shuanet	Low
Trojans	Data theft, SMS write-offs, mining cryptocurrencies	Faketoken, Svpeng	High
Rootkits	Obtaining root access, masquerading as system processes	Ztorg, NotCompatible	Critical
Spies	Surveillance location, call interception, access to camera	Cerberus, SpyNote	Very high
Randomers	Blocking phone with ransom demand	Simplocker, LeakerLocker	Critical

The most common for 2026 — addoors (60% of cases) and banking Trojans (25%). The latter are often disguised as QR code scanning or “security update” apps. If your phone is blocked with a request for payment, this is ransomver, and special measures are needed here.

⚠️ Attention: Some viruses (for example, Triada) are built into the firmware through vulnerabilities in chips Mediatek or Qualcomm. If the infection occurred after an over-the-air software update, conventional cleaning methods may not work.

Safe Mode: the first step to cleaning your phone

Before removing the virus, you must stop its activity. To do this, restart the phone in safe mode —only system applications work in it, and third-party ones (including viruses) are blocked.

Instructions for different models:

• 📱 Samsung, Xiaomi, Honor: Hold down the power button → hold your finger on “Turn off” → a prompt will appear to switch to safe mode. Press “OK.”
• 📱 Google Pixel, OnePlus: Hold down the power button → in the shutdown menu, hold down “Power Off” → the “Safe Mode” option will appear.
• 📱 Universal method: Turn off the phone → turn on by holding the button Volume down until the system boots.

In safe mode, check:

1. Have suspicious applications disappeared from the menu.
2. Has advertising stopped appearing.
3. Has control over the settings returned (for example, the ability to disable the device administrator).

If the problem disappeared in safe mode, the virus is definitely associated with one of the installed applications. If not, it is built into the system (a reset or flashing will be required).

Manual cleaning: removing the virus without an antivirus

Many viruses do not require complex removal tools. It's enough to know where to look. Follow this algorithm:

1. Removing suspicious applications

Go to Settings → Applications → List of all applications. Sort by installation date (newest on top). Delete:

• 🔍 Applications with names like System Update, Flash Player, Cleaner (if you have not installed them).
• 🔍 apps with icons in the form of a gear, shield or exclamation mark.
• 🔍 Everything that has rights device administrator (checked in Settings → Security → Device Administrators).

2. Cleaning the browser

Viruses often penetrate through the browser (especially if you downloaded APK files). Clear data Chrome or Samsung Internet:

1. Open your browser settings → Privacy → Clear data.
2. Select all history and check the boxes Cookies, Cache, Data sites.
3. Delete all saved passwords (the virus could have compromised them).

3. Resetting network settings

Some viruses replace DNS or proxies, redirecting traffic to fraudulent sites. Reset settings:

Settings → System → Reset → Reset Wi-Fi, mobile network and Bluetooth settings.

4. Checking accessibility rights

Viruses often request permissions Special. capabilitiesto intercept clicks or show windows on top of other applications. Check:

Settings → Accessibility → Installed services. Disable everything suspicious.

⚠️ Attention: If after deleting the application it appears again, the virus has rights Device Owner (often installed through phishing “Android updates”). only full reset or flashing.

Using built-in Android tools

Google has built several anti-virus tools into Android, but they are hidden deep in the settings. Here's how to activate them:

1. Google Play Protect

This is a built-in scanner from Google that checks applications for malicious code. To run the scan:

1. Open Google Play Market.
2. Click on the profile icon → Play Protect → Scan.
3. If threats are found, delete the specified ones applications.

Please note: Play Protect does not detect all viruses, especially new or modified ones. But it is effective against adware and Trojans from the official store.

2. Safe Mode Boot

If a virus blocks access to settings, try hard reset:

• Turn off the phone.
• Press Power + Volume up (on some models Volume down).
• In the recovery menu, select Wipe cache partition (will not reset data, but will clear temporary virus files).

3. Android

Starting from Android 12, the system keeps a log of suspicious actions. You can view it like this:

Settings → Security → Security log. Look for entries about:

• 🔹 Unauthorized APK installations.
• 🔹 Attempts to obtain root access.
• 🔹 Changes in administrator settings.

Reset to factory settings: when this is the only option

If manual cleaning and built-in tools did not help, it remains hard resetThis will delete all data from the phone, including the virus, but also erases:

• 📸 Photos and videos (if not saved in Google Photos).
• 📱 Contacts (if not synced with a Google account).
• 🎮 Game saves and application settings.

How to reset correctly:

1. Save important data to your computer or to the cloud.
2. Unlink your Google account (so that it is not blocked after the reset): Settings → Accounts → Delete account Google.
3. Reset: Settings → System → Reset → Delete all data.
4. After a reboot do not restore the data from backup —the virus may return!

⚠️ Attention: On phones with MIUI (Xiaomi, Redmi, Poco) after resetting, you may be required to enter your old account password Mi Account, even if you deleted it. Make sure you remember your login information!

If the virus remains after the reset, it is embedded in the firmware. In this case, only flashing via Fastboot will help (requires a PC and knowledge of commands ADB).

What to do if the reset fails helped?

If the virus remains after a complete reset, it means it is built into the modified firmware (often on phones from China with pre-installed software). data-i="223">or

1. Find the official firmware for your model on the manufacturer’s website.

2. Install it through the mode Fastboot or Recovery (instructions are on the 4PDA or XDA-Developers forums).

3. After flashing the firmware, do not install APKs from unknown sources and disable installation from untrusted locations in the security settings.

How to protect your phone from viruses in future

The best protection is prevention. Follow these rules to minimize risks:

• 🛡️ Install applications only from Google Play (even there are viruses, but less often). Avoid APKs from torrents and third-party sites.
• 🔍 Check reviews and ratings before installation. Virus applications often have a suspiciously high rating (4.8–5.0) with the same type of reviews.
• 📱 Update Android and applications. New versions fix the vulnerabilities that viruses exploit.
• 🔒 Disable installation from unknown sources: Settings → Security → Unknown sources.
• 📵 Do not connect to public Wi-Fi without VPN (viruses can spread through vulnerabilities in routers).
• 🚫 Ignore pop-ups with the offer to “update Flash Player” or “optimize your phone” is 99% a scam.

The most dangerous Android vulnerability in 2026 is an exploit Dirty Pipethat allows viruses to receive root access without user confirmation. It affects the Linux kernel up to version 5.8, so update the firmware if your phone is Released before 2022.

If you often have to install APKs externally (for example, for work), use VirusTotal -upload files to the site before installation to scan them with 60+ antiviruses.

FAQ: Frequently asked questions about viruses on Android

Is it possible to remove a virus without resetting to factory settings?

Yes, in 80% of cases the virus is removed manually through safe mode or built-in tools (Play Protect, security log) A reset is only needed for deeply embedded threats (rootkits, spyware) or if the virus blocks access. to the settings.

Do free antiviruses from Google Play help?

Most “free” antiviruses (Avast, Clean Master) themselves collect user data. They can find simple adware, but they often miss Trojans. It’s better to use built-in Play Protect and manual scanning, as described in. article.

The virus requires payment to unlock the phone. What should you do?

This is ransomver. Do not pay - after payment the phone may still remain locked. Try:

1. Reboot to secure mode and remove the suspicious application.
2. If that doesn’t help, do a reset via Recovery Mode (data will be lost).
3. For some models (Samsung, Xiaomi) there are unlocking utilities (for example, Mi Unlock Tool), but they require a PC.

Can a virus damage the phone’s hardware?

Directly - no, but indirectly - yes. Mining viruses overload the processor, which leads to overheating and degradation. batteryAlso, some Trojans can turn on the camera or microphone at full power, reducing their resource.

How to check your phone for viruses from another device?

If your phone is locked, connect it to the PC and:

1. Download ADB Tools (Android Debug Bridge).
2. Enter the command

   adb shell pm list packages -f

   —it will show all installed packages. name.
3. Remove the virus with the command

   adb uninstall com.virus.package

   (replace with the package name).

To do this, the phone must be enabled Developer mode and USB debugging.