The sudden appearance of advertising banners, pop-ups or full-screen videos directly on the locked smartphone screen is one of the most annoying problems faced by users Android. Most often, the culprit is not system failures, but specially installed malicious apps masquerading as useful utilities. Such advertising not only blocks access to important notifications, but also significantly consumes battery power, slows down the device and can redirect you to fraudulent sites.
Many users mistakenly believe that such intrusive advertising can be removed by simply clearing the browser cache or installing an antivirus. However, in most cases the culprit is a specific application, which received permission to display on top of other windows. To effectively solve the problem, you need to diagnose installed apps, check access rights and, if necessary, perform a factory reset. In this article, we will analyze in detail all the methods for eliminating annoying banners.
Diagnostics of the source of advertising and searching for malware
The first step in the fight against unwanted advertising is to identify the application that generates it. Often such apps are disguised as “flashlights”, “QR code scanners”, “memory cleaners” or even simple games. They may not have an icon in the application menu or may be called system processes with misspellings, for example System Update instead of the correct spelling. Your task is to carefully analyze the list of installed software.
Go to the smartphone settings and open the section Applications or Application Manager. Carefully review the entire list, paying special attention to apps installed shortly before the problem appeared. Look for apps that have no icons, empty names, or ones you don't remember downloading. Suspicious Software Often have a minimal size and ask for excessive permissions that do not correspond to its functionality.
Another reliable way to catch a virus red-handed is to use the “Recent Applications” function. The moment an advertisement appears on your lock screen, do not close it immediately. Press the button for calling up the most recent running apps (usually a square or three bars at the bottom of the screen). You will see a card of the application that is currently active. This is the source of the problem.
If an application does not have an icon and name in the list, try sorting the list by installation date - malicious software often appears at the very top or bottom of the list, depending on the Android version.
- 🔍 Check the list of all installed applications for apps without icons.
- 📱 Use the button “Recent tasks” at the time the advertisement appears to identify the culprit.
- 🚫 Pay attention to applications with names like “System Update”, “Security” from unknown developers.
- 📅 Remember what apps you installed before the pop-ups started appearing.
Disable the “On top of others” right applications"
In order for advertisements to appear on top of the lock screen or other running apps, the malicious application must have special permission. In the system Android this function is called “On top of other applications” (or “Overlay on top of other applications”). Without this right, the app will not be able to display an advertising banner on the locked screen.
To disable this permission, go to Settings → Applications. In the application settings menu, find Special access or Advanced settings, and then select On top of other applications. Here you will see a list of all apps that have this right. Study it carefully: system applications (launcher, phone, messages) should remain enabled, but any third-party utilities, especially those that cause suspicion, must be disabled.
If you find an application that you do not recognize, or one that clearly should not have such rights (for example, a calculator or voice recorder), immediately uncheck it or turn the switch to the “Off” position. This action will instantly prevent the app from blocking the system interface. After this, it is recommended to completely remove this application.
☑️ Checking access rights
⚠️ Attention: Do not disable the “On top of other applications” right for system launchers (shells), instant messengers (if you use pop-up chats) or screen recording applications if you really need them. This may disrupt their operation.
Uninstalling applications with administrator rights
Some types of malware are protected from removal by standard methods. They receive rights device administratorthat prevent the user from simply clicking the “Delete” button - it will be inactive or hidden. Such apps often position themselves as antiviruses or parental control tools, but in reality they only show advertisements.
To remove such an application, you must first deprive it of its privileged rights. Go to Settings → Security (or Biometrics and security) → Device administrator applications. In the list that opens, find a suspicious app. If you see anything there other than “Find device” (Find My Device) or a corporate profile, most likely it is a virus.
Click on the application name and select Deactivate or Disable administrator rights. Confirm the action in the pop-up window. As soon as the rights are removed, the application will become normal and can be deleted through the standard one. app management menu. If after deactivation the advertising disappears, but the application remains, delete it manually.
What to do if the “Deactivate” button is not pressed?
In rare cases, malware blocks the click. Try translating. smartphone into safe mode (press the power button, then long press “Turn off” on the screen). In safe mode, third-party applications will not launch, and you can safely remove administrator rights and remove the virus.
| Application type | Must be an administrator? | Action |
|---|---|---|
| Find device (Google). Calculator | Yes | Leave on |
| Corporate profile | Yes (if work phone) | Leave if necessary |
| Flashlight/Calculator | No | Urgently deactivate |
| Memory cleaner | No | Urgently deactivate |
| Unknown application | No | Urgently deactivate |
Clearing browser notifications and resetting settings
Sometimes the source of advertising on the lock screen is not individual applications, but permissions granted to sites in the browser. Users often accidentally click “Allow” on the lock screen. pop-up windows of sites, after which the browser starts sending spam notifications that look like system messages or advertisements.
To solve this problem, go to your browser settings (Chrome, Yandex, Samsung Internet). Find the section Site settings → Notifications. View the list of allowed sites, click on. them and select Block or Delete. It is best to remove all permissions for sites except those you trust 100%.
If scanning for viruses and cleaning the browser did not help, the system settings may have been deeply changed. In this case, an effective solution would be to reset the settings to factory settings. Before doing this, be sure to make a backup copy of your contacts and photos, as this procedure will delete all data from the internal memory of the phone, returning it to its original state. condition.
Resetting the settings to factory settings is a radical, but the most reliable way to get rid of hidden viruses that cannot be removed by standard methods.
⚠️ Attention: Before resetting the settings, make sure that you remember the password for your Google account. After resetting, the phone will require you to enter your account information to confirm ownership (FRP protection).
Using anti-virus scanners and safe mode
If you cannot find a malicious application manually, specialized utilities will come to the rescue. Anti-virus scanners, such as Malwarebytes, Kaspersky or Dr.Webhave signature databases of known ad viruses. They are able to find hidden processes that are not displayed in the regular list of applications.
Download a reputable antivirus from the official store Google Play, update the databases and run a full system scan. If a virus is found, follow the app's instructions to remove it. In difficult cases, when a virus blocks the installation of the antivirus or its launch, you must use Safe Mode.
Safe Mode loads Android only with system applications. To enter it, you usually need to hold down the power button, and when the menu appears on the screen, hold your finger on the “Shutdown” or “Reboot” button for a long time until you are prompted to switch to safe mode. In this mode, remove all suspicious applications that you could not remove before, and then reboot your phone as usual.
Prevention: how to avoid ads appearing in the future
The best way to deal with ads on the lock screen is to prevent them from appearing. Most viruses get onto the device due to user carelessness when installing apps. Try to download applications only from the official store Google Play, avoiding third-party sites and forums where modified versions of apps with embedded malicious code are often distributed.
Carefully read the permissions that the application requests during installation. If a simple flashlight asks for access to contacts, SMS and geolocation, this is a clear sign of fraud. It is also useful to regularly check the list of applications of the device administrator and revoke rights from apps that do not need them.
Enable the function Google Play Protection in the application store settings. It automatically scans installed apps and blocks potentially dangerous downloads. Regularly updating Android security also closes vulnerabilities through which viruses can enter the phone.
Install an ad blocker at the DNS level (for example, AdGuard DNS or Private DNS from Google) to block advertising requests before they are downloaded to the device. This will reduce traffic and speed up the browser.
Frequently asked questions (FAQ)
Why do ads appear even after uninstalling the application?
Perhaps there are several malicious apps left on the phone, or the virus managed to install an additional module. Also check your administrator rights and browser notifications. In some cases, a complete reset is required.
Can advertising on the lock screen steal my data?
Advertising itself most often just shows banners. However, clicking on it may redirect you to phishing sites where they will try to trick you into entering passwords or card details. Be extremely careful.
Is it safe to use applications to remove ads?
Use only proven antiviruses from reputable vendors. Many pseudo-"cleaners" and "accelerators" are themselves a source of advertising. Avoid applications with low ratings and few reviews.
What to do if the “Delete” button is grayed out?
This means that the application has administrator rights. Go to the security settings, find the “Device Administrator Applications” section, deactivate the rights for this app, and then remove it in the usual way.