The sudden appearance of advertising banners or full-screen ads on the locked screen of a smartphone is one of the most annoying problems for users Android. This not only distracts from important notifications, but also significantly reduces the autonomy of the device, draining battery power in the background. Users often confuse system notifications with malware, although the source of the problem may be hidden in a recently installed free application or changed personalization settings.
To be effective remove advertising, you need to consistently analyze the installed software, check application permissions and clear the system cache. In some cases, the culprit is not a virus, but a legal “Recommendations” function, enabled by default in manufacturers’ shells like Xiaomi, Samsung or Huawei. Understanding the nature of the occurrence of these windows allows you to choose the right method of combating - from simple settings to installing an anti-virus scanner.
In this guide, we will look at all the possible reasons for the appearance of annoying banners on lock screen and provide step-by-step guide for eliminating them. You'll learn how to find hidden malicious applications that don't show up in the app list, and how to configure your system so that it no longer offers advertising content. Follow the steps carefully, as some menus may differ depending on the version of your operating system.
Diagnosing the source of advertising on the device
The first step before any active actions is to accurately determine the source of the problem. Advertisements on the splash screen may appear due to the operation of a system service, a third-party launcher, or a hidden miner. If you see a “We recommend installing...” or “Discounts at nearby stores” message, it's likely a specific app you recently installed is to blame. Pay attention to the moment at which the banner appears: immediately after turning on the screen, after a certain amount of idle time, or when unlocking.
Modern versions Android have built-in monitoring tools that allow you to see which application displayed the last notification. When an advertising window appears, do not rush to close it. Instead, open the multitasking menu (Square button or swipe up and hold). In the list of running processes, look for an application with an icon corresponding to the content of the advertisement, or a app with a suspicious name, often masquerading as a system process.
If a visual inspection does not produce results, use the notification history. Go to Settings → Notifications → Notification history (the path may vary depending on the model). A log of all alerts for the last 24 hours is stored here. Find the ad-related entries in the list and look at the sender's name. This name often coincides with the name of the malicious apk filethat has entered the system.
⚠️ Attention: If the application that displays advertising has a name like “System Update”, “Flash Player” or a set of random characters, and it does not have an icon in the menu - this is almost guaranteed to be a virus miner or an aggressive adware.
Another diagnostic method is checking access rights. Advertising modules often require the “On top of other apps” permission. Go to Settings → Applications → Accessibility → On top of other applications. Study the list carefully: if you see a app there that you did not knowingly install, or a simple flashlight with such permission, this is a clear sign of a problem. Disabling this right will instantly stop displaying full-screen banners.
Removing hidden malicious applications
The most common reason for advertising to appear is the installation of apps from unreliable sources. Users often download hacked games, mods for popular instant messengers, or “battery boosters” from third-party sites. Such apps contain built-in advertising modules that are activated even after the main application is uninstalled, as they install an additional hidden component.
To find and neutralize such a “spy”, go to the application management menu via Settings → Applications. Scroll to the very end of the list and to the very beginning. Look for apps without an icon (a blank square instead of a logo) or with a name consisting of spaces. Such apps are often disguised so that the user does not notice them in the general list. If you find a suspicious element without an icon, immediately click on it and select Delete.
In some cases, the “Delete” button may be inactive (grayed out). This means that the malicious application has gained device administrator rights. To fix this, go to Settings → Security → Device administrator applications (or Settings → Biometrics and security → Other security settings). Uncheck the box next to the suspicious app. Only after this you can return to the application menu and delete it.
☑️ Hidden virus search algorithm
If you cannot find the app using standard means, use safe mode. In this mode, only system applications are loaded, and all third-party software is disabled. If the ads disappear in safe mode, then the problem is definitely in the application you installed. To enter this mode, you usually need to hold down the power button on the screen, and then long press the “Shut down” or “Reboot” button that appears until you are prompted to enter safe mode.
After removing all suspicious elements, it is recommended to clear the browser cache and file system of temporary installation packages. Often there are Download remains in the folder, which can be launched accidentally. Removing these files will prevent the re-installation of malicious code. APK files, which may be launched accidentally. Removing these files will prevent malicious code from being installed again.
Setting up system recommendations in manufacturers' shells
Advertising is not always a consequence of a virus. Smartphone manufacturers, such as Xiaomi (MIUI/HyperOS), Samsung (One UI) i Huawei (EMUI), often integrate advertising services directly into the firmware. This allows you to sell devices cheaper, monetizing the user experience by displaying “recommended content” on the lock screen, in application folders and in system utilities.
In devices Xiaomi the main source is the service MSA (MIUI System Ads). To disable it, you need to go to Settings → Passwords and security → Access to personal data. Find the item msa in the list and turn off the switch. The system will ask you to wait 10 seconds, after which it will confirm the shutdown. You should also go to the “Security” application, click on the settings gear and disable the “Receive recommendations” item.
Users Samsung should check the lock screen settings. Go to Settings → Lock screen. Find the "Information Services" option (or "Galaxy Store" in older versions) and disable it. It is this service that is responsible for displaying news feeds and advertising slides when you swipe across the lock screen. Also check the “Weather” and “Themes” applications, where items about displaying promotional offers are often hidden in the settings.
For owners Huawei i Honor it is important to disable the “Magazine Unlock” function. if it shows ads. Go to Settings → Screen and brightness → Block history and disable the enable option. In addition, in the section Settings → Privacy → Advertising service you can reset the advertising identifier or completely disable personalized advertising.
Hidden MIUI settings for advanced users
The Security application has a hidden developer menu. Click 10 times on the shield icon in the upper right corner to activate additional settings, where you can control the network activity of system processes in more detail.
Remember that after updating the firmware, some of these settings may be reset to factory values. Check the specified menu items periodically, especially after major system updates, to make sure that advertising modules are not activated again.
Cleaning the browser and disabling push notifications
Often, users mistakenly believe that ads on the lock screen are a virus, when in fact they themselves have signed up to receive notifications from dubious websites. This happens when you visit a site and a window pops up asking you to “Allow notifications” to confirm that you are not a robot. By clicking “Allow”, you give the site the right to send you spam directly to your home screen.
To fix the situation in the browser Google Chrome, open the application and go to the menu (three dots) → Settings → Notifications. In the list of sites, look for suspicious addresses containing words like “news”, “bonus”, “win” or strange character sets. Click on such a site and select “Block” or “Delete”. This action will instantly stop the flow of spam from this source.
A similar procedure must be carried out in other browsers installed on your device: Yandex Browser, Opera, Samsung Internet. Each of them has its own section for managing site notifications. Don’t be lazy to check them all, since the subscription could have been issued in any of them.
| Browser | Path to notification settings | Action |
|---|---|---|
| Google Chrome | Settings → Notifications | Disable suspicious sites |
| Yandex | Settings → Notifications from sites | Block all or selectively |
| Samsung Internet | Menu → Settings → Sites and downloads | Site notifications → Clear |
| Opera | Settings → Privacy | Manage site permissions |
If the list of sites is too long and you don’t want to figure it out, you can completely disable browser notifications in your phone’s system settings. To do this, go to Settings → Applications, find your browser, select “Notifications” and disable their display. This is a radical but reliable method, although you may miss useful notifications from web services.
Use browsers with a built-in ad blocker, such as Brave or Firefox with the uBlock Origin addon. They automatically block subscription requests from spam sites.
Resetting advertising settings and using antivirus software
If manually uninstalling applications and setting permissions did not help, it is possible that more complex malicious code has entered the system. In this case, specialized antivirus utilities come to the rescue. You should not rely on the built-in Defender, as it often misses an aggressive adware, which is not formally a virus, but simply displays advertisements.
It is recommended to install one of the proven apps: Malwarebytes, Kaspersky Internet Security or Dr.Web Light. After installation, run a full system scan. These applications can find hidden processes that are not visible in the standard task manager, and identify Trojans masquerading as system services. After detecting threats, follow the app's instructions to neutralize them.
Another effective step is to reset the advertising identifier. This will not remove viruses, but it will reset your profile for ad networks, which may reduce the frequency of targeted advertising. In your phone settings, find the section Google → Advertising (or Settings → Privacy → Advertising). Click “Reset Advertising ID” or “Remove Advertising ID”.
⚠️ Attention: Avoid installing “antiviruses” and “cleaners” from dubious sources that They themselves promise to speed up the phone. Often it is such apps that are the source of advertising on the screensaver. Download security software only from the official Google Play.
As a last resort, if all else fails, you can reset all settings to factory settings. Before doing this, be sure to back up your important data (photos, contacts), as this procedure will delete all information from the phone’s internal memory. Go to Settings → System → Reset settings → Delete all data. This is guaranteed to remove any malware, as the phone will return to its “out of the box” state.
An integrated approach: a combination of manual removal of suspicious applications, disabling system recommendations and antivirus scanning gives a 99% guarantee of getting rid of advertising.
Prevention and security of the device in the future
After successful removal of advertising, it is important to take measures to ensure that the problem does not return. The main cause of infection is user inattention when installing apps. Always carefully read the permissions an application asks for during installation. If a simple calculator asks for access to contacts, geolocation and phone number, this is a clear sign of fraud.
Disable installation of applications from unknown sources. Go to your security settings and make sure this feature is turned off for all browsers and file managers. Allow installation only from the official store Google Play, where applications are pre-checked for viruses. Although malicious software sometimes sneaks in there, the risk is much lower than when downloading APK files from forums.
Regularly update your operating system and installed applications. Developers Android constantly close vulnerabilities through which viruses penetrate the system. Enable automatic updates in your phone settings and Play Market settings. It is also useful to audit installed apps once a month and remove those that you do not use.
Be careful with public Wi-Fi networks. Connecting to unsecured access points can lead to DNS server spoofing, which can cause advertisements to appear even on clean sites. Use VPN services when connecting to the public Internet to encrypt traffic and protect against data tampering.
The myth about “viruses on Android”
In fact, classic viruses that reproduce on their own are rare on Android. 95% of problems with advertising are the result of the actions of a user who installed an application with aggressive monetization.
Frequently asked questions (FAQ)
Why do advertisements appear even after deleting all recent applications?
Perhaps the virus installed itself as a system application or received administrator rights, which does not allow it to be removed in the usual way. Also, advertising may come through push notifications from sites in the browser, rather than from applications. Check your browser notification settings and administrator rights in the security section.
Is it safe to use ad blocking apps (AdBlock)?
Using legal blockers such as AdGuard is safe and effective. However, avoid downloading “hacked” versions of paid blockers from dubious sites - they most often contain viruses that display advertisements. Download only official versions from Google Play.
Can advertising on the screensaver steal my personal data?
The advertising image itself does not steal data. However, clicking on such a banner may redirect you to a phishing site that, under the guise of logging into your Google or bank account, will try to steal your passwords. Therefore, the main rule is to never click on suspicious advertising.
How to distinguish system advertising from a virus?
System advertising (from the phone manufacturer) usually looks neat, matches the interface style and appears in predictable places (folders, lock screen). Viral advertising often looks crooked, covers the interface, appears at random times and often leads to sites with casinos or dubious products.
Will a factory reset help remove ads forever?
Yes, a Hard Reset removes all user data and applications, including any viruses and hidden modules. After the reset the phone will be clean. However, if you immediately restore the backup that contains the infected application, the ads may return. Restore only contacts and photos, and reinstall applications manually.