The appearance of pop-up banners, full-screen ads or new icons on the main screen of your smartphone is not just annoying factor, but a direct sign of infection of the device adware (advertising virus). Unlike annoying but legal advertising in free applications, such banners appear chaotically: when the phone is unlocked, on top of other windows, or even when the screen is turned off.
Most often, users themselves install such threats by downloading hacked games, modified versions of popular instant messengers, or system "optimizers" from unverified sources. Android is open by nature system, which makes it vulnerable to scripts masquerading as system processes. Ignoring the problem can lead not only to decreased productivity, but also to theft of personal data.
In this article we will look at effective methods of dealing with digital waste. You'll learn how to find hidden malicious apps, block spam notifications from browsers, and, as a last resort, perform a hard system reset. It is important to act consistently so as not to delete important data, but to ensure that you get rid of the source of the problem.
Diagnostics: searching for a hidden malicious application
The first step is to identify the hero of the occasion. Viruses are often disguised: they may not have an icon, the name may be empty, or they may be the same as system services like “Android System” or “Update Service.” Go to the menu Settings → Applications → All applications and carefully scroll through the list.
Pay special attention to applications that do not have an icon (empty space to the left of the name) or that were installed recently, right before the ad appeared. Sometimes malicious code is embedded in legitimate applications downloaded from third-party resources, so remember what exactly you installed in recent days.
- 🔍 Check applications without icons or with transparent icons in the general list.
- 📅 Sort the list by installation date to find the latest additions.
- 🛡️ Pay attention to applications with device administrator rights.
⚠️ Attention: If the “Delete” button is inactive (gray), then the application has received administrator rights. You need to first revoke these rights in the section
Settings → Security → Device administrators, and only after that return to deletion.
☑️ Virus scan
Blocking spam from browsers and notifications
Often the source of pop-up advertisements is not viruses, but notifications from sites allowed by the user. When visiting various resources, we often accidentally click “Allow” on the request to display notifications, after which the site begins to send push notifications with advertisements for casinos or dubious products directly to the desktop.
To stop this disgrace, you need to go to the settings of the specific browser that you use most often (Chrome, Yandex, Opera). Find the section Settings → Notifications → Sites (the path may vary slightly depending on the shell version). Here you will see a list of all resources that have the right to send you messages.
Ruthlessly delete or block all unknown domains. If you don't use site notifications at all, the easiest way is to completely disable this feature in your global browser settings. This will not affect the operation of sites, but will get rid of visual noise.
To quickly check in Chrome, enter chrome://settings/content/notifications in the address bar - this will immediately open a list of sites with rights to notifications.
Cleaning the desktop from unnecessary widgets and shortcuts
Sometimes advertising is not registered as a separate application, but as a widget or shortcut added to the desktop. Such elements may look like harmless “Weather”, “Forex Rates” or “Memory Cleaner”, but when clicked, they open advertising pages or launch background processes.
Press the suspicious widget on the screen with your finger and drag it to the top of the display, where a “Delete” or trash icon will appear. If the widget is not deleted or immediately appears again, this is a sure sign of the presence of a hidden parent application, which must be found through the settings, as described in the first section.
⚠️ Attention: Do not remove system widgets from the smartphone manufacturer (for example, weather widgets from MIUI or One UI) if you are not sure of their origin. Remove only those items that you did not install yourself or that lead to strange sites.
After cleaning the desktop, it is recommended to restart the device in normal mode. This will allow the system to rebuild the interface and make sure that the deleted components have actually disappeared from RAM.
Use of anti-virus scanners and special utilities
If manual cleaning does not produce results, specialized protection tools will come to the rescue. For Android there are many antiviruses that can detect known adware signatures. However, it is important to choose proven solutions so as not to install another virus under the guise of protection.
It is recommended to use tools such as Malwarebytes, Dr.Web Light or the built-in scanner Google Play Protect. Run a full system scan. These apps can find hidden processes that are not displayed in the standard application list.
| Tool | Protection type | Effectiveness against Adware | Paid version |
|---|---|---|---|
| Google Play Protect | Built-in | Medium | No |
| Malwarebytes | Third-party | High | Yes |
| Dr.Web Light | Third-party | High | No (base) |
| Kaspersky | Third-party | High | Yes |
After detecting a threat, follow the application's recommendations to eliminate it. In some cases, you may need to reboot into safe mode to delete a file that is locked by an active process.
Antiviruses are effective against known threats, but may miss fresh or heavily modified viruses, so manually checking the list of applications is required.
Safe mode: removing uninstallable viruses
If a virus resists removal in normal mode, constantly pops up and blocks access to settings, you need to load your smartphone in Safe Mode (Safe Mode). In this mode, only system applications are launched, and all third-party software, including viruses, is deactivated.
The login method depends on the device model. Usually you need to hold down the power button, and then in the menu that appears, hold down the “Turn off” item with your finger for a long time until you are prompted to switch to safe mode. On some models Samsung or Xiaomi the combination of buttons may differ (for example, holding down the volume down button when turning on).
Being in safe mode, you can easily go into the settings and remove the malicious application that previously prevented you from doing this. After removal, simply restart your phone as usual to return to normal operation.
What to do if the buttons do not respond?
If the sensor does not work due to a virus, try connecting a USB mouse via an OTG cable. Using the mouse cursor, you can Navigate through the menu and disable dangerous applications.
Extreme measure: reset to factory settings
When nothing helps and advertising continues to poison your life, the only guaranteed way remains is a complete data reset (Hard Reset). This procedure will return the phone to the “as from the store” state, deleting all applications, photos, contacts and settings.
Before starting the procedure, it is critical to save all important data to external media or cloud storage (Google Drive, Yandex.Disk). The process is irreversible: it will be impossible to restore deleted files without a preliminary copy.
To perform a reset, go to Settings → System → Reset settings → Delete all data. Confirm the action and wait for the process to complete, which may take from 5 to 15 minutes. The phone will reboot and require initial setup.
⚠️ Attention: Make sure you remember the password for your Google account. After the reset, the system will require you to enter a login and password to confirm ownership of the device (FRP protection). Without this data, the phone will turn into a “brick”.
☑️ Preparing to reset
Prevention: how to prevent re-infection
Having gotten rid of advertising, it is important to consolidate the result and prevent re-infection. The main reason for infection is user carelessness when installing software. Never download applications from dubious forums, file dumps or Telegram channels that promise “hacked” versions of paid apps.
In the security settings of your smartphone, it is recommended to disable the ability to install applications from unknown sources. If such a need arises (for example, to install enterprise software), enable this option only during the installation of a specific application and immediately disable it afterwards.
Regularly update the operating system and installed applications. Developers Android and shell manufacturers are constantly closing vulnerabilities through which viruses penetrate the system. An old version of the software is an open door for attackers.
Install an ad blocker at the DNS level (for example, AdGuard DNS or Private DNS from Google). This will cut off most of the advertising traffic before downloading to the device, even in the browser.
Frequently asked questions (FAQ)
Why do ads appear even after deleting the application?
There are probably several associated malware left on the phone, or the virus has managed to install itself as a system application (which requires root access). It is also possible that the source of advertising is notifications from allowed sites in the browser, and not a separate application.
Is it possible to remove advertising without losing data?
Yes, in 90% of cases it is enough to find and remove a specific malicious application or disable notifications in the browser. A reset to factory settings is required only in the most advanced cases, when a virus has deeply penetrated the system.
Is it safe to use applications to “speed up” and “clean” your phone?
Most of these applications from the free segment are themselves sources of advertising and data collectors. To clear the cache, the built-in Android tools in the “Storage” section are sufficient. Third-party cleaners often do more harm than good.
What to do if a virus prevents you from entering the settings?
Try to start the phone in Safe Mode. In this mode, third-party applications will not launch, and you can easily remove the virus through the settings menu. If this does not help, only Hard Reset through the Recovery menu will help.
I deleted the application, but the icon remained on the desktop. Is this normal?
Sometimes the label remains as a “ghost”. Try rebooting your device. If the icon does not disappear after a reboot, long-press it and drag it to the trash. If it comes back again, it means that the application was not completely removed or other software associated with it remains.