The sudden appearance of intrusive banners on the desktop, pop-up windows in the browser, or automatic installation of unknown apps are sure signs that your smartphone is infected. Viral ads on Android are not only annoying and disruptive, but can also redirect traffic to phishing sites, steal personal data, or significantly drain your battery. Often, users do not understand where the problem comes from, since malicious code can be hidden in seemingly harmless utilities: QR code scanners, flashlights or simple games.
Removing such a virus requires a systematic approach. You can't just close the pop-up window and hope the problem goes away. You need to identify the source of infection, block its activity and completely clean the device of malicious code. In this article, we will analyze effective methods of combating adware, from simple system settings to radical recovery measures.
There is no need to panic. In most cases viral advertising you can fix it yourself without resorting to paid services from service centers. The main thing is to act consistently and not ignore the suspicious behavior of your gadget. The sooner you start cleaning, the less data can be damaged.
Diagnostics: how to recognize the source of infection
Before you start deleting, you need to understand which application is the carrier of the virus. Often, malicious code disguises itself as system processes or uses names similar to legitimate apps. The first sign of infection is the appearance of advertisements when you are not using the browser or a specific application. If banners pop up on top of the desktop or during calls, it means that a background process is active in the system.
Pay attention to battery consumption and mobile traffic. Viruses that display advertisements constantly run in the background, consuming resources. Go to settings and check your data usage statistics. If you see an application with an unclear name or icon that has consumed gigabytes of traffic, although you have not used it, it is almost certainly adware (adware).
It is also worth checking the list of recently installed apps. Malicious code often gets onto the device along with free applications from unverified sources. Even if you downloaded the app from the official store Google Play, it could have been updated by the developer with the introduction of a malicious module after installation.
Search and remove hidden applications manually
The most effective way to deal with it is to manually remove the culprit. Many viruses try to hide from the user by removing their icon from the general list or making it transparent. To find such an application, go to menu Settings → Applications → All applications. Carefully scroll through the entire list, paying attention to apps without a name or with an empty icon.
Sometimes a malicious application disguises itself as a system service, for example, calling itself "Android System", "Update Service" or "Wi-Fi Helper". However, real system processes usually do not have a "Delete" button, only a "Disable" button. If you see a suspicious app with an uninstall button that consumes a lot of resources, uninstall it immediately.
If the standard list of applications does not help you find the source, use the task manager or the battery usage section. It often displays the real names of the processes that run the ads. By clicking on such a process, you can go to information about the application and delete it.
☑️ Search for malware
If the "Delete" button is inactive (gray), it means that the application has administrator rights. You must first revoke them in the "Security → Device Administrators" section.
Using antiviruses and scanners
When a manual search does not produce results, specialized utilities come to the rescue. Antivirus scanners can detect signatures of known viruses and behavioral anomalies. For Android, there are many free solutions that effectively deal with Trojans and advertising banners. It is recommended to use proven products from well-known vendors, such as advertising banners and the Trojans.
It is recommended to use proven products from reputable vendors such as Dr.Web Light, Kaspersky or Malwarebytes. These applications have databases that are updated regularly, allowing them to detect even the latest threats. After installation, run a full system scan.
It is important to understand that an antivirus may not remove the virus, but only report its presence. In this case, it will provide a link to a file or process name that needs to be deleted manually through the settings. Some complex viruses require rights Superuser (Root) to be completely removed, but for most ordinary users standard access rights are sufficient.
⚠️ Attention: Do not install several antiviruses at the same time. They can conflict with each other, slow down the smartphone and give false positives to each other’s files.
Setting up a private DNS to block ads
One of the most effective methods of preventing and combating advertising is blocking at the network level. Technology Private DNS (Private DNS), available in Android 9 and later, allows you to redirect requests through a server that filters advertising domains. This will save you from banners in the browser and many applications without the need to install additional software.
To activate this function, go to Settings → Connections → Other connection settings → Private DNS (the path may differ depending on the model Samsung, Xiaomi or Huawei). Select the "ISP Host Name" mode and enter the address of a reliable filter.
The most popular and stable solution is the AdGuard DNS service. Enter the following value in the field:
dns.adguard.comAfter saving the settings, the system will begin to automatically cut off requests to known ad servers. This will not remove the virus itself if it is already installed, but will deprive it of the ability to show you intrusive advertising, which often makes the continued existence of a malicious application pointless.
Setting up Private DNS blocks up to 90% of advertising in the system and browser, without requiring the installation of third-party applications and does not consume the battery.
Clearing cache and browser data
Often the source of the problem is not a separate application, but accumulated garbage in the browser. Malicious scripts can be stored in the cache or cookies, causing constant redirects to dubious sites and pop-ups. If ads appear only when surfing the Internet, the problem is most likely here.
You need to completely clear your browser data. Go to Settings → Applications, find your browser (Chrome, Yandex, Opera) and select "Storage". Click the "Clear cache" and "Clear data" buttons. Please note that clearing data will delete your browsing history, saved passwords and site settings, so make sure that important data is synchronized with your account.
Also check your browser permissions. Go to the settings of the browser itself and find the "Notifications" section. Often, users accidentally allow sites to send notifications that look like system messages or advertisements. Revoke all suspicious permissions.
| Type of cleaning | What is deleted | Impact on data | Recommended frequency |
|---|---|---|---|
| Clearing cache | Temporary files, website images | Safe, data is saved | Once a month |
| Data clearing | Cookies, history, logins, settings | Full reset browser | When infected |
| Download history | APK installation files | Deleting files from memory | Immediately after installation |
Radical measures: reset to factory settings
If none of the above methods helped get rid of viral advertising, the last and most effective option remains - a complete reset of the device to factory settings (Hard Reset). This procedure will delete absolutely all data from the internal memory of the smartphone, including any, even the most hidden viruses.
Before starting the procedure, it is critical to create a backup copy of all important data: photos, contacts, documents. Use cloud services Google Drive or copy the files to your computer. After the reset, it will be impossible to recover the file deleted by the virus.
To perform a reset, go to Settings → System → Reset settings → Delete all data (reset to factory settings). Confirm the action and wait for the reboot. The process may take from 5 to 15 minutes. After turning on, the phone will be the same as you bought it in the store.
⚠️ Attention: After resetting, do not restore all applications from Google backup at once. Install only the essentials manually. If you restore a malicious application from a backup, the virus will return to the phone.
What to do if the phone does not boot?
If the virus has blocked the system from loading, try entering Recovery mode. To do this, turn off the phone and hold down the button combination (usually Volume Up + Power). In the Recovery menu, select Wipe data/factory reset.
Prevention of re-infection
After successful cleaning, it is important to follow the rules of digital hygiene so that the problem does not return. The main cause of infection is the installation of applications from untrusted sources. Try to download apps only from the official store Google Play, where they are moderated.
When installing new applications, carefully read the permissions they request. If a simple flashlight asks for access to contacts, SMS and geolocation, this is a clear sign of fraud. Uninstall such apps.
Regularly update the Android operating system and installed applications. Developers are constantly closing security vulnerabilities in new software versions. An outdated system is an easy target for hackers and virus creators.
Turn on the "Google Play Protection" feature in your app store settings. It automatically scans installed apps and blocks dangerous downloads.
Is it possible to remove a virus without resetting the settings?
Yes, in 80% of cases it is enough to find and remove a malicious application manually or using an antivirus. Resetting the settings is only required in advanced cases, when the virus has embedded itself deep into the system or is disguised as a system process that cannot be disabled.
Why do advertisements appear even after deleting the application?
You may have not deleted the virus application itself, but only its shortcut. Or there are several infected apps installed on the phone. Ads can also come through browser notifications, which need to be disabled separately in the site settings.
Is it safe to use Private DNS to block ads?
Yes, using addresses like dns.adguard.com is safe. This is a standard Android feature that encrypts your DNS requests. The only negative is that some sites may stop opening if their advertising is blocked, but this is rare.
Do you need to format an SD card if there is a virus?
If only photos and documents are stored on the memory card, it is not necessary to format it. However, if you installed applications on the card, it is better to format it through the phone settings, since the virus could be saved in the application data folder.