The situation when your smartphone suddenly begins to live its own life, opening advertising pages or suspicious sites without your knowledge, causes natural irritation and anxiety. Most often, the problem lies not in a breakdown hardware, but in software conflicts or malware that disguises itself as system processes. Users notice that the browser starts itself, loads strange resources or endlessly creates new tabs, turning the device into a source of spam.
The main reason for this behavior is the presence of adware that could get into the system along with free applications from unverified sources. Aggressive web notifications that you accidentally enabled while visiting dubious sites may also be the culprits. In some cases, the browser itself causes a crash due to a full cache or an outdated version of the software. adware - advertising software that could enter the system along with free applications from unverified sources. Aggressive web notifications that you accidentally enabled while visiting dubious sites may also be the culprits. In some cases, the browser itself causes the crash due to a full cache or an outdated version of the software.
To regain control of your device, you need to carry out comprehensive diagnostics and consistent cleaning of the system. In this article we will analyze all possible methods of solving the problem: from simple browser settings to in-depth virus scanning. You will learn how to find a hidden pest and set up protection so that similar incidents do not occur in the future.
Diagnosing the source of the problem: viruses or notifications
The first step in solving the problem is to determine exactly what exactly is causing pages to start automatically. It can be a full-fledged application that has infiltrated the system, or a legitimate application that simply abuses the rights to display notifications. Users often confuse these two concepts, trying to treat a virus with treatment for what is simply an intrusive advertisement from an authorized site. Trojan virus, infiltrated into the system, or a legitimate application that simply abuses the rights to display notifications. Users often confuse these two concepts, trying to treat a virus with treatment for what is simply an intrusive advertisement from an authorized site.
Pay attention to the moment the tabs appear. If the browser opens immediately after the screen is unlocked or during random times when the phone is idle, there is a high probability of a malicious process running in the background. If pop-up windows appear only when using certain applications or immediately after visiting a specific resource, the problem most likely lies in subscribing to push notifications.
For an initial check, go to your phone settings and view the list of recently installed apps. Remove all suspicious utilities, especially those that you downloaded shortly before the problem appeared. Viruses are often disguised as “Memory Cleaners”, “Flashlights” or “QR Code Scanners”, having no real functionality other than displaying advertisements.
⚠️ Attention: If you find an application without an icon or with a name consisting of a set of random characters in the list of installed apps, uninstall it immediately. This is a sure sign of a hidden miner or advertising module.
Clearing data and cache of the Chrome browser
The easiest and most effective way to get rid of intrusive redirects is to completely clear the browser data Google Chromewhich is installed by default on most Android smartphones. Stored cookies and scripts may contain code that triggers the opening of new tabs. This procedure will reset all site settings to factory settings.
To perform cleaning, go to Settings → Applications → Chrome → Storage. Here you need to press the button Clear cacheand then select Clear all data or Reset. Be prepared for the fact that after this action you will have to re-enter passwords on sites, since all saved sessions will be destroyed.
It is also worth checking the settings of the browser itself for allowed sites. Go to the Chrome menu (three dots), select Settings → Notifications and carefully review the list of allowed senders. If you see unfamiliar domains, immediately disable them or remove them from the list.
☑️ Browser cleaning checklist
After completing these steps, reboot the device and check if the problem goes away. In 80% of cases, it is a dirty cache or allowed notifications that is the reason why browser behaves unpredictably.
Searching for and removing malicious applications
If cleaning the browser did not help, then the problem is deeper in the system. Some applications have privileges SYSTEM_ALERT_WINDOWthat allow them to display windows on top of other applications. This is often used by developers of aggressive advertising, forcing the phone to open tabs even when the screen is locked.
Go to the section Settings → Applications → Special access → Display on top of other applications. Carefully study the list of apps that have this permission. Disable it for all applications except system messengers or navigators, where this function is really needed. Any game or calculator with such access is a red flag.
Additionally, check your device administrator rights. Go to Settings → Security → Device Administrator Applications. Only Google services (Find My Device) and corporate email clients should be active here if you use work email. Third-party apps should not have these rights, as this prevents them from being uninstalled.
What to do if the application is not uninstalled?
If the “Delete” button is grayed out or the application immediately appears again, most likely it has acquired administrator rights. First, revoke these rights in the security settings, and only after that try to remove the app in the usual way. In difficult cases, you may need to enter safe mode.
Using a specialized anti-virus scanner will also not be amiss. apps like Malwarebytes or Dr.Web are capable of finding hidden threats that are not visible in the standard application manager. Run a full system scan and follow the app's recommendations to neutralize threats.
Blocking pop-ups and malicious sites
Modern browsers have built-in protection mechanisms, but they are not always enabled by default or can be bypassed by tricky scripts. Strengthening your browser settings will help prevent tabs from opening automatically in the future. This will create an additional barrier for advertising networks.
In Chrome settings, find the section Site settings. Here you need to make sure that the switch Pop-ups and redirects is in the “Locked” position. It is also recommended to disable the option Advertisingif available in your browser version to block aggressive ad formats.
For more advanced protection you can change settings DNS at the level of the entire operating system. Using DNS with ad filtering, for example, from the AdGuard service, will allow you to block requests to known ad servers even before the browser tries to load the page.
| Type of protection | Where to configure | Efficiency | Difficulty |
|---|---|---|---|
| Pop-up blocker | Browser settings | Medium | Low |
| Disable notifications | Site Settings | High | Low |
| Private DNS (AdGuard) | Android Network Settings | Very High | Medium |
| Virus removal | Application Manager | Critical | High |
To configure private DNS, go to Settings → Connections → Other connection settings → Private DNS and enter the address: dns.adguard.com. This will block ads in all applications and browsers.
Resetting network and Internet settings
Sometimes the problem lies not in a specific application, but in network settings that may have been changed by malware. Resetting network settings will return Wi-Fi, mobile data and Bluetooth settings to factory defaults, removing potentially dangerous proxy server configurations.
You can perform this operation through the menu Settings → System → Reset settings → Reset Wi-Fi, mobile data and Bluetooth settings. Please note that after this you will need to re-enter passwords for all Wi-Fi networks to which you previously connected.
Also check the proxy server settings in your Wi-Fi network settings. Go to the settings of a specific network, click Change and expand additional parameters. Make sure that the Proxy server value is selected in the Nofield. If any IP address or domain is indicated there, this is a clear sign that your traffic is being redirected through a third-party server.
⚠️ Attention: If you are using a corporate network or specific provider settings, check with the system administrator about the need to manually enter proxy settings before resetting, so as not to lose access to work resources.
This method is especially effective if tabs open only when connected to a specific Wi-Fi network, but do not work via the mobile data. In this case, the problem is local and can be solved by changing the settings of the router or network.
Radical measures: resetting to factory settings
If none of the above methods helped get rid of the annoying opening of tabs, the last and most effective option remains - a complete reset of the device to factory settings. This is guaranteed to remove any virus, even one that is deeply embedded in the system and disguises itself as system processes.
Before starting the procedure, be sure to create a backup copy of important data: photos, contacts and documents. Remember that after resetting, the phone will be the same as you took it out of the box, and all installed applications will be deleted. Go to Settings → System → Reset settings → Delete all data (reset to factory settings).
After completing the process and initial setup of the phone Do not restore applications from the backup copy at once. Install only the most necessary apps manually. If you restore all applications at once, you risk returning the virus that caused the problem, since the backup copy may contain infected installation files.
A full reset is a 100% guarantee of removing viruses, but it requires time to re-set up the phone. Always make a backup of important data before this procedure.
Carefully monitor the operation of the device in the first days after the reset. If the problem does not return, then the problem was in the software. In the future, be careful when installing applications from unverified sources and do not click on suspicious advertisements.
Prevention and safe use of the browser
To prevent the problem from returning, it is important to maintain digital hygiene. Install a reliable antivirus that will run in the background and scan new applications during installation. Regularly update your operating system and the browser itself, as developers are constantly closing vulnerabilities that attackers exploit.
Avoid visiting sites with dubious content, pirated movies or gambling. It is on such resources that scripts that force browser to open tabs are most often picked up. Use ad blockers, such as AdGuard or browser extensions that support content filtering.
Do not give sites permission to send notifications unless you are sure they are trustworthy. If a site insists on allowing notifications to view content, this is almost always a trap. Just close the tab or block the request in your browser settings.
Why does the browser open on its own after an Android update?
After a major system update, some applications may conflict with new versions of WebView components. Try updating the application Android System WebView and the Chrome browser itself via the Google Play Store. If this does not help, clear the cache of these components.
Can a virus open a tab when the screen is off?
Yes, some types of malware (especially miners or clickers) can activate the screen and open tabs in the background to boost traffic. This drains the battery a lot. In this case, only a complete reset or deletion of a specific application through safe mode will help.
How to enter safe mode on Android to remove a virus?
Hold down the power button, then in the shutdown menu, press and hold the “Power off” (or “Reboot”) option until a request to enter safe mode appears. In this mode, only system applications work, which allows you to safely remove the virus.
Is it dangerous to click “Allow” on a site that asks for notifications?
Yes, this is one of the most common infection schemes. By clicking "Allow", you give the site the right to send you push notifications at any time, even when your browser is closed. These notifications often contain links to phishing sites or trigger the download of malicious APK files.
Will installing a different browser solve the problem?
Changing browsers (for example, to Firefox or Brave) may temporarily hide the problem if it is caused by the settings of a specific browser. However, if a virus lives in the system, sooner or later it will start opening tabs in the new browser. It is necessary to treat the cause, not the effect.