The sudden appearance of advertising banners on the lock screen is one of the most annoying problems of owners Android smartphones. This phenomenon not only distracts you from using the device, but may also indicate a serious infection of the system with malware. Users often confuse system notifications from pre-installed applications with the operation of viruses, which leads to incorrect methods of dealing with the problem.
Advertising on a locked display usually appears due to three main reasons: installing dubious software, changing permission settings in the browser, or aggressive policies of budget device manufacturers. Understanding the source of the problem is the first and most important step to solving it. In some cases, it is enough to simply turn off the notification; in others, you will need to deep clean the system or reset the settings.
In this article we will analyze in detail diagnostic algorithms and methods for eliminating intrusive banners. You will learn how to distinguish a legitimate notification from malware, which applications most often become a source of spam, and how to configure your device so that the lock screen remains blank forever.
Diagnostics of the source of advertising notifications
Before taking removal steps, you need to accurately identify the culprit. An advertising banner on the lock screen rarely appears on its own; there is always a specific application or system process behind it. If you notice a pop-up window, do not rush to close it. Try pressing and holding your finger on the notification text or use the view details function.
Modern versions Android allow you to see which application sent the notification. The notification shade often has a gear icon or arrow next to the banner. By clicking on it, the system will redirect you to the settings of a specific application. If the banner appeared instantly and disappeared, you should check the list of recently installed apps.
- 🔍 Pay attention to the application icon in the corner of the notification - often this is the logo of a browser, flashlight or game.
- 📱 Check the “Recently installed” section in Google Play Market to find suspicious software.
- ⚙️ Go to your notification settings and see which applications have the “Show on top of other windows” feature enabled.
Particular attention should be paid to applications that request permission to display on top of other windows. This is a critical safety setting. If a regular calculator or photo editor requires such permissions, it's almost guaranteed to be a sign of malicious activity. Disabling this right often completely solves the problem with advertising on the locked screen.
⚠️ Attention: If, when you try to check the notification details, the phone settings do not open, and the screen simply goes blank or goes to the main screen, this is a sure sign of a lurking virus. Such software is disguised as system processes.
Removing malicious applications and viruses
The most common scenario for the appearance of advertising is when the user installs an application containing an advertising module. Often such apps are disguised as useful utilities: memory cleaners, QR code scanners, simple games or flashlights. After installation, they begin to generate traffic, showing banners even when the phone is locked.
To remove such software, you need to go to the menu Settings → Applications → All applications. Review the list carefully. Look for apps without an icon, with a transparent name, or ones that you don't remember installing. Sometimes a malicious application may not have a name in the list, appearing as an empty line.
If you find a suspicious item, click on it and select the button Delete. In cases where the delete button is inactive (dimmed), it means that the application has received device administrator rights. You will need to go to the Settings → Security → Device administrators section and uncheck the suspicious item. Only after this can it be uninstalled.
☑️ Checklist for virus removal
In difficult situations, when a virus blocks access to settings, you may need to enter safe mode. To do this, you usually need to hold down the power button on the screen, and then long press “Restart” or “Shut down” until you are prompted to boot into safe mode. In this state, only system applications work, which allows you to safely remove the culprit.
What to do if the application is not uninstalled?
If standard removal does not help, try using third-party antiviruses such as Malwarebytes or Dr.Web in scanning mode. They can forcefully delete files locked by the system. As a last resort, a full reset to factory settings will be required.
Configuring notifications in the Chrome and other browsers
Often the source of advertising is not a virus, but a subscription to site notifications, which the user accidentally confirmed when visiting a web page. Browsers like Google Chrome, Yandex or Opera have the right to show push notifications from sites, and some resources abuse this by sending spam directly to the lock screen.
To fix this, open the browser and go to settings. The path usually looks like this: Menu (three dots) → Settings → Notifications (or “Site Settings” → “Notifications”). You will see a list of sites that are allowed to send notifications. Look there for unfamiliar domains or resources with suspicious names.
| Action | Where to find in Chrome | Where to find in Yandex.Browser |
|---|---|---|
| Open settings | Three dots → Settings | Three dots → Settings |
| Sites section | Privacy → Settings sites | Sites → Advanced site settings |
| Notification management | Notifications | Notifications |
| Blocking | Toggle the slider to “Blocked” | Select “Block” |
For each suspicious site, click on the name and select the option Delete or Block. This will instantly stop the flow of advertising messages from this source. It is also recommended to clear your browser history and cache to remove possible traces of scripts that initiate subscription.
Regularly check the list of allowed sites in your browser. Often, new subscriptions are added automatically when visiting entertainment portals or torrent trackers.
Disabling system advertising from the manufacturer
Owners of smartphone brands Xiaomi, Samsung, Huawei i Honor often encounter advertising built into system shells. Manufacturers of budget models can monetize the device by showing app recommendations or news on the lock screen. This is not a virus, but a standard feature, which, however, can be disabled.
In devices Xiaomi (MIUI) advertising often comes from the service MSA (MIUI System Ads). To remove it, you need to go to Settings → Passwords and security → Access to personal data. Find it in the list msa and turn off the switch. The system will try to dissuade you several times by showing a countdown timer - just wait and confirm the shutdown.
For Samsung you need to check your lock screen settings. Go to Settings → Lock screen and disable the “Show information” or “Short message services” options. It is also worth going to the application Galaxy Store, open the settings and uncheck the “Receive marketing notifications” item.
⚠️ Attention: MIUI, OneUI and EMUI shell interfaces are constantly updated. Menu item names may differ depending on the Android version and firmware region. If you do not find an exact match, look for sections with the words “Advertising”, “Recommendations” or “Personalization”.
Do not forget about the “Security” or “Phone Manager” application pre-installed by the manufacturer. Inside it there is often a “Get Recommendations” section that sends promotional notifications. Disabling this function will significantly clear the notification curtain and lock screen from intrusive offers.
System advertising from the manufacturer is legal and is not a virus, but it can and should be disabled in the personalization settings for ease of use.
Using blockers and antiviruses
If manual configuration does not help or you want to provide comprehensive protection, you should use specialized software. Ad blockers and mobile antiviruses are capable of filtering traffic and blocking calls to ad servers at the system level.
One of the effective methods is setting up a private DNS. In modern versions Android 9 and higher there is a built-in function Private DNS server (located in the section Network and Internet → Additional settings). By entering the blocker address there, for example dns.adguard.com, you can cut off most of the advertising traffic for all applications.
- 🛡️ AdGuard - a powerful all-in-one tool that filters advertising in browsers and applications, but requires access settings.
- 🦠 Malwarebytes —specializes in finding and removing adware that conventional antivirus apps miss.
- 🔒 Kaspersky Internet Security —offers comprehensive protection, including anti-phishing and blocking of dangerous sites.
When using third-party blockers, it is important to remember about resource consumption. Constantly filtering traffic may slightly increase battery consumption. However, for devices heavily infected with advertising junk, this is a temporary payment for system cleanliness. After cleaning and removing viruses, there may be no need for active protection.
Do blockers work without root access?
Yes, most modern solutions, such as AdGuard or setting up Private DNS, work without obtaining superuser rights. They use a local VPN tunnel to filter data packets.
Preventing future ads
Removing current ads is only half the battle. To prevent the problem from returning, it is necessary to change the culture of smartphone use. The main attack vector is user inattention when installing apps and clicking on links. Following simple digital security hygiene rules will minimize risks.
Never download applications from third-party sources unless absolutely necessary. Google Play Protect filters the store quite effectively, but APK files from forums and file hosting services often contain modified code with embedded advertising. Always check reviews and the number of downloads before installing new software.
Regularly review installed applications. If you installed a app, used it once and forgot, delete it. Dead weight in phone memory often becomes a dormant source of problems during the next developer update. Also, don't give apps excessive permissions: why would a flashlight need access to your contacts?
⚠️ Attention: Be careful with “Allow” buttons on websites. If a site asks you to allow notifications to “verify that you are not a robot” or to “download a file,” it’s a scam. Close the tab immediately.
Timely updating of the operating system also plays an important role. Google and device manufacturers regularly release security patches to address vulnerabilities that allow adware to enter systems. Ignoring updates leaves your smartphone open to known threats.
Set a rule: if an application requires strange permissions (for example, access to SMS for a game), it is better to find an analogue with a better rating than to risk data security.
Frequently asked questions (FAQ)
Why ads appear even after removal applications?
This can happen for two reasons. First, the virus could have installed an additional hidden component that remained on the system. Secondly, you may have accidentally subscribed to site notifications in your browser. In the first case, scanning with an antivirus in safe mode will help, in the second, clearing the browser notification settings.
Can advertising on the lock screen steal my money?
Advertising itself does not steal money, but it can redirect you to a phishing site that disguises itself as a bank or government services page. If you enter your card details or password there, attackers will gain access to them. Therefore, clicking on advertisements from a locked screen is extremely dangerous.
How to distinguish a system notification from a virus?
System notifications usually have a clear application icon, clear text, and when clicked, open the corresponding app. Viral advertising often has blurry images, text with errors, calls for urgent action (“You win!”, “Download urgently!”) and when you try to get details, it does not open the settings, but simply closes.
Do you need to do a factory reset?
Hard Reset is a radical measure that is guaranteed to remove any virus, but you you will lose all data on your phone. You should resort to it only if manually deleting applications, cleaning the browser and scanning with an antivirus did not produce results.