Sudden the appearance of pop-up windows, banners on top of the desktop, or the automatic launch of a browser with dubious sites is a sure sign that your device is infected adware (adware). Such a problem is not only annoying, but also significantly reduces the performance of the smartphone, drains the battery and poses a threat to the security of your personal data. Often, users do not even suspect which application installed this digital garbage.
Fortunately, in most cases Android allows you to independently diagnose and fix the source of the problem without contacting a service center. The cleaning process can range from simply revoking browser permissions to searching for hidden system viruses masquerading as legitimate utilities. In this article, we will analyze all the effective methods of combating intrusive advertising, from basic settings to advanced methods of blocking traffic.
Searching for and removing malicious applications
The first and most obvious step is to analyze the list of installed apps. Advertising viruses are often disguised as useful utilities: “memory cleaners,” “flashlights,” “QR code scanners,” or even simple games. Go to Settings → Applications → All applications and carefully study the list. Look for apps without an icon, with an empty name, or ones that you don’t remember installing.
Particular attention should be paid to applications that were installed recently, around the time the problem started. If you find a suspicious element, click on it and select the Deletebutton. In some cases, the delete button may be inactive, which means that the malware has acquired device administrator rights, which we will discuss in the next section.
⚠️ Attention: Some viruses hide in the application list without displaying their name or icon. If you see an empty line in the list of installed apps, this is almost certainly the source of advertising. Delete it immediately.
For a more in-depth analysis, it is recommended to use the built-in service Google Play Protect. It automatically scans your device for threats. To run a manual check, open the store Play Market, click on the profile icon and select Play Protect → Scan. This will help identify known malware signatures that may have escaped your attention.
☑️ Check installed applications
Revoke device administrator rights
If you cannot remove a suspicious application in the usual way, most likely it has received extended privileges. Malicious apps often require administrator rights to block their removal. To fix this, you need to go to a special section of the security settings.
Navigate to the path Settings → Security → Device administrators (on some models the path may be Settings → Biometrics and security → Other security settings). In the list that opens, you will see all applications that have elevated rights. Find the suspicious app here and uncheck the box next to it, confirming the action with the button Disable.
After that Once the rights are revoked, the application will lose its “armor”. Now you can return to the regular list of apps and remove it using the standard method. If the ad disappears after removal, the problem is resolved. However, if the virus was cunning, it could install several copies of itself, so the check is worth repeating.
What to do if the administrator does not turn off?
If the system writes an error when you try to disable administrator rights, try rebooting the phone in safe mode. To do this, hold down the power button, and when the menu appears, hold your finger on the “Turn off” item for a long time until you are prompted to switch to safe mode. In this mode, third-party applications will not run, and you can safely revoke rights and remove the virus.
Setting up ad blocking via DNS
One of the most effective and modern ways to remove advertising at the system-wide level is to use a private DNS server. This method does not require the installation of additional applications and blocks advertising requests before they even reach your screen. This works for all browsers and most applications.
Starting from version Android 9, this function is built right into the network settings. You need to go to the section Settings → Connection → Other connection settings → Private DNS. Select the “DNS Provider Hostname” mode and enter the address in the field: dns.adguard.com. Save the settings.
| Setting type | Value / Address | Efficiency |
|---|---|---|
| Standard DNS | Automatic (from the operator) | Low (advertising passes) |
| AdGuard DNS | dns.adguard.com |
High (blocks banners) |
| DNS-over-HTTPS | security.cloudflare-dns.com |
Medium (traffic protection) |
After applying these settings, advertising in browsers and many free applications will stop loading. This can also speed up the Internet, since the device will not have to download heavy advertising banners. If any legitimate service stops working correctly, you can always return the DNS setting to Auto mode.
Using private DNS not only removes ads, but also increases privacy by encrypting your DNS queries and hiding your browsing history from your ISP.
Clearing browser notifications
Often users confuse viral advertising with spam notifications from websites. You may have accidentally clicked the “Allow” button on some site, and now it sends you push notifications with advertisements for casinos or dubious products directly in the notification shade. This is not a virus, but simply a permission that needs to be revoked.
Go to the settings of your main browser (for example, Chrome or Yandex.Browser). Find the section Site settings → Notifications. Here you will see a list of all resources that are allowed to send messages. Carefully look through the list and look for sites with suspicious names.
Click on such a site and select the option Block or Delete. It is best to block all resources unknown to you, leaving permissions only for those sites that you use regularly and trust. This will instantly clear the notification bar from information noise.
⚠️ Attention: Never click “Allow” on pop-up windows in your browser if the site asks to show notifications for watching a video or downloading a file. This is a standard trick of scammers for sending spam.
Reset settings to factory settings
If none of the above methods helped, and advertising continues to appear even after removing all suspicious apps, the virus may have become deeply integrated into the system. In this case, the most reliable solution would be to completely reset the device to factory settings.
This procedure will completely delete all data from the phone, including contacts, photos and applications, so critically make a backup copy of important files before starting. Go to Settings → System → Reset settings → Delete all data (reset to factory settings).
After rebooting, the phone will be like new, without any traces of viruses. When setting up for the first time, be careful: do not restore the backup copy of applications immediately, as you may return the virus along with them. Reinstall apps manually only from trusted sources.
A full reset is a radical, but 100% guarantee of removing any software virus. Always back up your data before this procedure.
Prevention and future safety
To prevent the problem from returning, you need to change your smartphone usage habits. The main source of infection is the installation of applications from unverified sources. Try to download apps only from the official store Google Play. If you are forced to install APK files from third-party sites, be sure to check them through online services like VirusTotal.
It is also worth regularly updating your operating system and installed applications. Developers Android constantly close security vulnerabilities that virus creators take advantage of. An outdated version of the OS is an open door for attackers.
As additional protection, you can install a high-quality antivirus from a well-known vendor, for example, Kaspersky, Dr.Web or ESET. They work in the background and block attempts to install malware, and also check downloaded files in real time.
Why do ads appear even after uninstalling the application?
Some ad modules may leave behind hidden files or task schedulers that continue to run ads. It is also possible that you have several infected applications installed on your phone and you only deleted one of them. In rare cases, a virus can disguise itself as a system update.
Is it safe to use ad blockers?
Yes, using blockers such as AdGuard or setting up a private DNS is absolutely safe for the device. They do not disrupt the operation of the system, but only filter incoming Internet traffic, filtering out advertising requests. This is a standard practice to save traffic and protect privacy.
Can advertising be a sign of a physical breakdown?
No, pop-up ads are purely a software problem. Physical damage to the screen (broken pixels, touchscreen) manifests itself differently. However, if the phone itself presses on the screen (the so-called “phantom tap”), this may be either a sign of a virus or a malfunction of the display or charger.