The sudden appearance of advertising banners on top of the desktop or in games is not just an annoying factor, but a sign that unwanted software has penetrated the system of your device. Most often, users accidentally install malware along with free utilities, flashlights, or memory “optimizers” from unofficial sources.
The situation is aggravated by the fact that modern advertising display algorithms are becoming more and more aggressive. If your Samsung, Xiaomi or Lenovo pages in the browser begin to open spontaneously or full-screen banners appear even when the screen is locked, you need to act immediately.
In this article we will analyze effective methods for diagnosing and cleaning the system. You will learn how to find a hidden virus application, block pop-ups at the browser level and return your tablet to its former performance without losing personal data.
Diagnostics: identifying the source of advertising
The first step is to determine which application is causing the problem. Malicious code is often disguised as system processes or does not have an icon in the menu at all.
The next time an annoying banner appears, do not close it immediately. Tap the Recent Apps button (usually the square or three bars at the bottom of the screen). In the list of running apps, you will see the active window on top of the others.
Remember the name or icon of this application. They often have neutral names like "System Update", "Cleaner" or "WiFi Boost", but their icons may not be in the main menu or may be transparent.
- 🔍 Check the list of recently running applications when the ad appears.
- 📱 Go to settings and look for an application with a suspicious name or without an icon.
- 🚫 Pay attention to apps installed shortly before the problem appeared.
If you cannot visually determine the source, you should use the application manager for a detailed analysis of the list of installed software.
Removing hidden and malicious applications
Most viruses that cause pop-up ads can be removed using standard by means of the system. However, some of them may have administrator rights, which blocks the delete button.
Go to the section Settings → Applications → All applications. Scroll through the list carefully. Look for apps that do not have a name (empty field) or the icon looks like a white square. Also suspicious are applications with the names of system services, but with strange permissions.
If the “Delete” button is inactive, it means that the application has received device administrator rights. You need to revoke these rights first.
Settings → Security → Device AdministratorsIn this menu, uncheck the suspicious application. After that, return to the list of applications and calmly delete it.
⚠️ Attention: If you cannot find the application in the regular list, try sorting the list by installation date. Viruses are often the last to be installed.
For complex cases when standard removal is not possible, you may need to enter safe mode.
Clearing browser data and resetting settings
Often the source of advertising is not a separate application, but spam notifications from sites you accidentally subscribed to, or a browser cache containing malicious ones scripts.
The most effective way to get rid of this is to completely clear your browser data. This will return it to the “as after installation” state, deleting all saved passwords, history and, importantly, permissions to display notifications.
Go to Settings → Applications, find your browser (Chrome, Yandex, Samsung Internet). Select item Storage and press Clear data (not to be confused with clearing the cache, you need to delete data).
- 🗑️ Clearing data deletes all saved logins and passwords in the browser.
- 🔔 All permissions for sending push notifications from sites are reset.
- 🚫 Temporary files that could contain advertising scripts are deleted.
After After this procedure, the browser will be clean when you first launch it. When visiting sites, carefully watch for pop-ups asking you to “Allow notifications” - always click “Block” or “Deny”.
☑️ Checking your browser
Blocking ads via DNS and special applications
If removing viruses did not help completely, or advertising comes from legal but intrusive networks (for example, in free games), you can use system blocking at the network level.
The simplest and most effective method for modern versions of Android (starting from 9.0) is to use private DNS. This does not require the installation of third-party apps and works at the level of the entire system.
Go to Settings → Connections → Other connection settings → Private DNS (the path may differ depending on the model, for example, to Xiaomi this Connection and sharing). Select the “ISP Hostname” mode and enter the address:
dns.adguard.comThis server automatically cuts off requests to known advertising networks. Sites will load faster, and banners will disappear from most applications and browsers.
Using DNS filtering does not require root access and has virtually no effect on Internet speed, making surfing more comfortable.
An alternative is to install specialized blockers, such as AdGuard or Blokadathat create a local VPN tunnel to filter traffic.
Analysis of permissions and access rights
Malware often requests excessive rights to operate. A regular flashlight or calculator doesn't need access to your contacts, microphone, or "overlay" permission.
Pay special attention to permission “On top of other windows” (or "Overlay on top of other applications"). It is this that allows advertising to overlap the interface of other apps.
In the settings menu, find the section Special features or Advanced settings, then On top of other applications. Check the list: if there are apps that do not need this permission due to the purpose of their work (for example, a music player or reader), deny them access.
| Application type | Do you need the "On top of windows" permission | Risk when enabled |
|---|---|---|
| Messengers (Telegram, WhatsApp) | Yes (for pop-up chats) | Low |
| Flashlight / Calculator | No | High (virus) |
| Memory optimizers | No | High (advertising) |
| Browsers | Optional | Average |
Regular audit of permissions helps prevent the installation of hidden miners or spyware in the future.
Why ordinary antiviruses do not see advertising?
Many advertising modules are considered legal software (Adware), since the user himself agreed to the license agreement during installation. Antiviruses often ignore them so as not to interfere with the operation of legal free applications.
Radical measures: reset to factory settings
If none of the above methods helped, and advertisements continue to appear, the virus may have penetrated deep into the system or damaged system files.
In this case, the only reliable solution is a full reset device to factory settings (Hard Reset). This will delete absolutely all data, applications and settings, returning the tablet to its original state.
Before the procedure, be sure to create a backup copy of important photos and documents to your computer or cloud storage, since it will be impossible to restore them after a reset.
Settings → System → Reset settings → Delete all data (factory reset settings)After rebooting, the device will be clean. During the initial setup, do not restore the backup copy of applications immediately - it is better to install them manually from the official store Google Playto avoid returning the virus back.
⚠️ Attention: Make sure that the tablet is charged at least 50-60% before starting the reset. Interrupting the process may damage the device.
This is an extreme measure, but it guarantees 100% removal of any software junk.
A full reset is a guarantee of a clean system, but it takes time to re-configure and install applications.
Prevention: how to avoid infection in the future
To prevent the problem from returning, you need to change your tablet use habits. The main reason for infection is the installation of APK files from dubious sources.
Try to download applications only from the official store Google Play. Although low-quality software sometimes slips through there, the Google Play Protect security system checks files much more thoroughly than third-party sites.
When installing any application, carefully read the permission requests. If a simple game requires access to your SMS or contacts, this is an alarming sign. Cancel the installation.
- 🛡️ Do not disable Google Play Protect in the security settings.
- 🚫 Avoid sites with “hacked” versions of paid games and apps.
- 👀 Read reviews carefully before installing new ones utilities.
It is also useful to periodically check the device with a built-in security scanner or a reliable antivirus, for example, Kaspersky or Dr.Web.
⚠️ Attention: Android menu interfaces may differ depending on the manufacturer (MIUI, OneUI, ColorOS shells). If you do not find a menu item by its exact name, use the search by settings (magnifying glass icon).
Maintaining digital hygiene is the best protection against intrusive advertising and viruses.
Is it possible to remove advertising without root access?
Yes, in most cases, deleting a malicious application, clearing the browser or setting up a private DNS does not require root access. These methods work with standard user rights.
Why does advertising appear even after deleting the application?
Perhaps several related malware are installed on the tablet, or the virus managed to install a hidden shortcut/profile. In this case, only a complete reset of the settings will help.
Is it safe to use AdGuard DNS?
Yes, using the AdGuard public DNS server is safe. It only filters traffic, blocking requests to ad servers, and does not have access to your personal data or passwords.
How to distinguish a system application from a virus?
System applications usually have an Android robot icon or the manufacturer's logo, they cannot be deleted (only disabled), and they are at the beginning of the list. Viruses often do not have an icon or have a name similar to the system one, but with a misspelling.