Has your smartphone started opening advertising tabs on its own, running out of battery quickly, or showing banners on top of other applications? Most likely, your device is infected with malware. There is no need to panic: in most cases cleaning the system you can get rid of viruses on your own without contacting a service center.
Many users mistakenly believe that to treat a gadget, paid antiviruses with annual subscriptions are required. In fact, there are many effective methods that allow you to remove threats free, without sending paid SMS and without intrusive registration on dubious sites.
In this article we will analyze a step-by-step algorithm of actions: from a simple check of installed applications to a radical system reset. You will learn how to identify a hidden pest in the list of processes and prevent re-infection using only built-in tools Android and proven utilities.
Primary diagnosis: how to recognize an infection
The first step to healing your smartphone is an accurate diagnosis. Viruses on Android rarely go unnoticed, since their goal is either to make money from advertising or to steal data. The behavior of the device changes dramatically, and it is dangerous to ignore these signals.
If you notice that the battery is discharged in a couple of hours, although it previously held a charge all day, this is a sure sign of a malicious miner or Trojan operating in the background. You should also be wary if the phone heats up even at rest, and Internet traffic is consumed at an abnormal speed.
The most obvious symptom is the appearance of intrusive advertising. Banners can pop up on the desktop, overlap the dialer interface, or open on their own when the screen is unlocked. This is the work of Adwareviruses, which are often disguised as useful utilities: flashlights, QR code scanners or photo editors.
⚠️ Attention: If messages appear on the screen on behalf of the police or intelligence services demanding that you unlock your phone by paying a fine, this is a scam. Law enforcement agencies never block devices through virus banners.
Removing malicious applications through settings
Most viruses get onto the phone in the form of regular applications that the user installs himself, unaware of the catch. Therefore, the first stage of treatment is a thorough revision of the list of installed software. Go to the menu Settings → Applications and carefully study the list.
Look for apps with suspicious names or without an icon. Viruses often disguise themselves as system services with names like "System Update", "Wi-Fi Service" or simply have an empty name. If you see an application that you don't remember installing, or that was downloaded just before problems appeared, this is a candidate for removal.
Some malware has device administrator rights, which does not allow them to be removed in the usual way. In this case, the "Delete" button will be inactive. You need to go to the section Settings → Security → Device administrators (the path may differ depending on the model Samsung, Xiaomi or Huawei) and uncheck the suspicious application.
After review administrator rights, return to the list of applications and try to remove the app again. If standard removal does not help, you can use safe mode, which disables all third-party software when the system boots.
☑️ Audit installed applications
How to enter safe mode?
Usually, to do this, you need to hold down the power button on the desktop, and then long press the "Shut Down" icon on the screen. In the window that appears, select "Safe Mode". In this mode, only system applications work, which makes it easy to find and remove the virus.
Using the built-in Google Play Protection scanner
A powerful security tool is already built into the operating system - Android a powerful security tool is already built in - Google Play Protection. It works in the background and checks applications both from the official store and installed from other sources. Many users disable it to save resources, but when infected, this is the first thing that needs to be activated.
To run the scan, open the store Google Play Market. Click on your profile icon in the upper right corner and select "Play Protection". In the menu that opens, click the "Check" button. The system will scan all installed applications for known threats.
If malware is found, the system will offer to remove it immediately. It is important to note that the Play Protection signature database is updated automatically, so it is effective against most common viruses. However, it may be powerless against sophisticated spyware Trojans, and then third-party solutions will be required.
| Threat type | Risk to data | Difficulty of removal | Play Protection response |
|---|---|---|---|
| Advertising banner (Adware) | Low (spam) | Low | Often detected |
| Trojan stealer | High (password theft) | Average | Detects often |
| Miner | Average (battery wear) | High | May miss |
| Spyware | Critical | Very High | Rarely detected |
Turn on the "Improve malware scanning" feature in Play Protection settings. This allows you to send data about installed applications to Google for deeper analysis, which increases the chance of detecting new threats.
Free antiviruses without registration and SMS
If the built-in tools are not enough, specialized antivirus scanners will come to the rescue. The main rule when choosing is to download them only from the official store Google Play. Avoid sites that offer “super antiviruses” in the form of APK files, since these same viruses are often distributed under their guise.
There are a number of reliable solutions that allow you to conduct a full scan of your device for free. apps such as Malwarebytes, Kaspersky Virus Removal Tool or Dr.Web Light do not require you to register an account or enter a phone number for a basic scan.
The treatment process is simple: install the application, run a full system scan and follow the instructions to remove the threats found. After cleaning, it is recommended to remove the antivirus itself if you do not plan to use it for permanent protection, so as not to load the system.
⚠️ Attention: Avoid applications with names like “Super Clean Virus Remover 2026” from unknown developers. Often these are fakes that show false messages about viruses in order to force you to buy a paid version or watch advertising.
Real antiviruses do not require sending paid SMS to remove viruses. Any requirement to pay for deletion via SMS is a sign of fraud.
Clearing the browser cache and resetting notifications
Sometimes the problem lies not in the installed application, but in the mobile browser settings. Attackers can subscribe to PUSH notifications from a dubious site, and now your phone constantly receives spam. This is not a virus in the classical sense, but the behavior of the device will be similar.
To correct the situation, go to the settings of the browser (Chrome, Yandex, Opera) that you use most often. Find the section Settings → Notifications or Site settings. Check the list of allowed sites and revoke access from all suspicious resources with unclear names.
It is also useful to clear the cache and browser data. This will remove stored scripts and redirects that may cause tabs with advertisements to open automatically. In the applications menu, find your browser, select Storage and click Clear cache and Clear data.
Remember, that clearing your browser data will delete your browsing history and saved passwords inside it, so make sure that important data is synced with your Google account before doing this.
Radical method: resetting to factory settings
If none of the above methods helped get rid of the virus, the last but most effective option remains - a complete reset of the device to factory settings (Hard Reset). This procedure will delete absolutely all data from the internal memory of the phone, including viruses, photos, contacts and applications.
Before starting the procedure, be sure to create a backup copy of important data. Copy photos and documents to your computer or cloud storage. Contacts linked to your Google account will be restored automatically after logging in.
To reset, go to Settings → System → Reset settings (path may vary). Select "Erase all data (factory reset)". Confirm the action and wait for the reboot. The phone will return to the state it was in when purchased.
⚠️ Attention: After resetting, do not restore applications from the backup copy immediately. The virus could have been saved in the backup. It is better to install the system as new and manually download only the necessary apps from reliable sources.
What to do if the phone does not turn on after a reset?
If the device is stuck on the logo or reboots cyclically, a virus may have damaged the system files. In this case, you will need to flash the phone via a computer using official software from the manufacturer (for example, Odin for Samsung or Mi Flash for Xiaomi).
Prevention of re-infection
After successful cleaning, it is important to change your digital habits so that the problem does not return. The main source of viruses on Android is the installation of applications from unverified sources. Try to download software exclusively from Google Play Market.
In your phone's security settings, make sure that the "Install from unknown sources" option is disabled for all browsers and file managers. This will create an additional barrier to the accidental installation of a malicious APK file.
Regularly update your operating system and installed applications. Developers are constantly closing security vulnerabilities that hackers exploit. An outdated version Android is an easy target for modern threats.
The best defense against viruses is critical thinking. Do not click on bright banners saying “Your phone is infected!” in the browser and do not download hacked versions of paid games.
Frequently asked questions (FAQ)
Can a virus steal money from a bank card without my knowledge?
Yes, banking Trojans are capable of intercepting SMS with confirmation codes and replacing data entry screens in banking applications. Therefore, if you suspect a virus, immediately change the bank passwords from another device.
Does deleting the apk file after installing the application help?
No. After installation, the application is unpacked into the system folder. Removing the installation file (apk) from downloads does not in any way affect an already running app or virus.
Do I need to format the SD card when removing viruses?
It is advisable. Viruses can write their files to a memory card. If you reset your phone but insert an infected flash drive, the malware may reinstall. It is better to format the card through the phone settings.
Is it true that antivirus software itself slows down the phone?
Modern lightweight scanners have virtually no effect on performance. The brakes are often caused by the viruses themselves (miners), rather than by security measures. However, installing two or more active antiviruses at the same time can really cause a conflict and slowdown.
What to do if a virus demands a ransom for unlocking?
Do not pay under any circumstances. These are scammers who will not unlock your phone even after payment. The only solution is to flash the device or reset it through the Recovery Menu (volume and power buttons when the phone is turned off).