The sudden appearance of advertising banners on top of the desktop or annoying push messages from unknown applications is a common problem faced by owners of smartphones based on Android. Such pop-up windows not only distract from important tasks, but can also significantly reduce the performance of the device, using up battery power and mobile traffic in the background.
Most often, the source of such “digital garbage” is free utilities downloaded from unverified sources, or sites where the user accidentally allowed notifications to be sent in the browser. To restore the comfort of using your gadget, you need to consistently check the system settings, clear the browser cache and identify malicious software.
In this guide, we will analyze effective methods of combating spam, starting from simple interface settings and ending with a deep analysis of installed applications. You will learn to distinguish between system messages and advertising spam, and also learn how to prevent them from appearing in the future.
Diagnosing the source of pop-up advertising
Before you begin to remove it, it is critical to understand where exactly the signal is coming from. Pop-up windows can be generated by the browser itself, a specific installed application, or even a system service infected with an adware module. Without an accurate identification of the culprit, any actions will be chaotic.
Pay attention to the moment the advertisement appears. If banners pop up only when you open a specific site, then the problem lies in the settings browser and allowed notifications. If advertising appears on the desktop or when the screen is locked when the browser is closed, then with a 99% probability one of the installed applications.
Try to press the “Recent applications” button (the square or three bars at the bottom of the screen) at the moment when the advertisement pops up. In the list of running processes, you can often see an icon of the app that is currently active, even if it does not have a name or its icon is transparent. This is a sure sign of a hidden miner or ad virus.
If advertising appears immediately after turning on the screen, check the “Wallpaper” or “Themes” settings - some launchers embed advertising modules into the lock screen.
It is also worth checking the battery usage statistics. Go to settings and find the section that displays the energy consumption of applications. A app that consumes a lot of resources in the background, but which you rarely use, is often the source of intrusive pop-ups.
Disable notifications in the Chrome browser and other browsers
The most common scenario is that a user visits a site with files or movies and accidentally clicks “Allow” in the notification subscription dialog box. After this, the site gets the right to send notifications directly to the lock screen, simulating system messages about news or winnings.
To correct the situation in Google Chrome, you need to go to the settings of the browser itself. Find the "Site Settings" or "Notifications" sections. There you will see a list of all resources that have been given permission to send messages. Carefully study this list and remove all suspicious domains, especially those that contain a set of random characters or unfamiliar names.
☑️ Clearing browser permissions
Similar steps must be performed in other popular browsers, such as Opera, Firefox or Samsung Internet. The interface may differ slightly, but the logic remains the same: search for the privacy section and revoke rights from unverified resources.
⚠️ Attention: Some sites use cunning scripts that disguise the refusal button. Always carefully read the text in the browser pop-up window before clicking any button.
After revoking permissions, it is recommended to completely clear your browser data. This will remove saved cookies and cached scripts that may have remained in the device's memory. Go to the “Storage” section in the browser application settings and select “Clear data.”
Search and remove malicious applications
If the problem is not in the browser, it means that a parasitic application has settled on the device. Often such apps are disguised as useful utilities: “Memory Cleaner”, “Flashlight”, “QR Code Scanner” or “Photo Editor”. They may not have an icon in the menu or be called system processes like “Android System Service.”
Go to the main settings of your smartphone and select the “Applications” section. Please review the entire list carefully. Look for apps without icons (empty white space instead of a picture) or with names consisting of a set of characters. If such an object is detected, immediately click on it and select “Delete.”
| Sign of a virus | Where to look | Action |
|---|---|---|
| No icon | List of all applications | Immediate deletion |
| High battery consumption | Settings -> Battery | Forced stop and deletion |
| Unknown name | Manager applications | Checking in Google Play |
| Requesting administrator rights | Security settings | Revocation of rights and removal |
Sometimes malware is protected from deletion by acquiring rights device administrator. In this case, the “Delete” button will be inactive. To bypass the protection, go to the security settings, find the “Device Administrator Applications” section and uncheck the suspicious app. Only after this can it be deleted in the standard way.
What to do if the application is not deleted?
If standard deletion is not possible, try booting the phone into “Safe Mode”. To do this, you usually need to hold down the power button, and then hold down the “Turn off” item on the screen for a long time until the prompt to switch to safe mode appears. In this mode, third-party applications do not launch, and the virus can be removed without any problems.
Do not forget that some viruses can be reinstalled automatically if their installation body (APK file) remains on the phone. Check the “Downloads” folder and delete all application installation files that were not downloaded from the official store Google Play.
System-level pop-up blocking
Modern versions Android (starting from 9.0 and higher) have built-in protection mechanisms against intrusive advertising. However, they are not always enabled by default or users may have accidentally disabled them. Activating system filters can significantly reduce the amount of spam.
Accessibility settings often hide useful features. Find the item responsible for removing ads or protecting against pop-ups. In some shells, for example from Xiaomi or Samsung, there are separate switches for blocking advertising in system applications.
It’s also worth paying attention to the “Digital Well-Being” function. It allows you to track which apps show the most notifications. By limiting the frequency of notifications for suspicious apps, you can make their work less noticeable and intrusive.
For advanced users, there is the option to use Private DNS. This is a method of blocking ads at the network connection level without installing additional apps. In the network settings, specify the address of the DNS server that filters advertising domains, for example dns.adguard.com.
Settings -> Connections -> Other connection settings -> Private DNS -> Enter: dns.adguard.com⚠️ Attention: Using third-party DNS servers may affect the loading speed of some sites or the operation of specific applications. If you notice problems with the Internet, return the setting to Auto mode.
Reset notification settings for all applications
If manually checking each application takes too much time or you cannot find the source of the problem, you can use a radical but effective method - completely resetting notification settings. This action will disable all push messages for all apps except system ones.
After completing this procedure, you will have to re-enable notifications only for those instant messengers and services that are really important to you (for example, Telegram, WhatsApp, mail). But you are guaranteed to get rid of all hidden subscriptions and spam.
To perform a reset, go to the “Applications” section, select the menu (three dots in the corner) and find the “Reset application settings” or “Reset preferences” item. Confirm the action. Please note that this will also reset the default settings for opening files and background restrictions.
Full reset of application preferences is a safe operation that does not delete your personal data, photos or contacts, but returns all app settings to the factory state.
After the reset, the phone may work a little differently in the first hours until you set up your usual usage scenarios. However, keeping the system free from information noise is worth it. Please read subscription requests carefully in the future.
Use of antiviruses and special utilities
In cases where a virus has deeply embedded itself in the system and masquerades as system processes, manual removal may not help. Specialized anti-virus scanners come to the rescue, capable of finding hidden threats and advertising modules (Adware).
It is recommended to use proven solutions from well-known vendors, such as Dr.Web Light, Kaspersky or Malwarebytes. These apps have signature databases that are regularly updated and include thousands of known ad viruses.
Run a full system scan. If a threat is found, follow the application's instructions to neutralize it. Often, antiviruses may offer to remove an infected application or clean up infected files.
- 🛡️ Malwarebytes —specializes specifically in removing adware and spyware that regular antiviruses miss.
- 🔍 Dr.Web Light —excellently finds Trojans and downloaders, often used to display pop-up ads.
- 🚀 Avast Cleanup —in addition to searching for viruses, it helps find “sleeping” applications that run in the background and generate traffic.
Remember that installing two antiviruses at the same time is not recommended, as they can conflict with each other and slow down the smartphone. Choose one reliable solution and use it for periodic prevention.
Prevention of pop-up windows
Removing ads is only treating symptoms. To prevent the problem from returning, it is necessary to change the culture of smartphone use. The main source of infection is installing applications from unknown sources and visiting suspicious sites.
Always keep the “Play Protection” feature enabled in the Google Play store. It automatically scans installed applications for malicious code. Do not ignore security warnings when trying to install APK files from the browser.
⚠️ Attention: Android settings interfaces may differ depending on the phone model and firmware version (MIUI, OneUI, ColorOS). If you do not find the described menu item, use the settings search by entering the keyword “Notifications” or “Applications.”
Update your operating system and browsers regularly. Developers are constantly closing vulnerabilities through which advertising networks can inject their scripts onto the device. The current version of the software is the key to your digital hygiene.
Frequently asked questions (FAQ)
Why do advertisements appear even after deleting the application?
Perhaps there are several infected apps left on the phone, or the virus managed to download an additional module (dropper) that restored the advertisement. Also check if you have recently installed an update to any legitimate application that has started showing aggressive ads.
Is it safe to use Private DNS to block ads?
Yes, it is safe. You simply change the address of the server that processes your requests to sites. The server dns.adguard.com simply does not return the addresses of the ad servers, so the advertisement is not loaded. Your personal data is not transferred to third parties.
Can a virus on Android steal money from a bank card?
An advertising virus itself (Adware) usually only displays advertisements. However, banker Trojans may be hiding under the guise of useful apps. If you notice suspicious activity other than advertising (SMS, calls), immediately scan your phone with an antivirus and change your passwords.
How to distinguish a system notification from an advertisement?
System notifications usually have a clear icon of the application that sent them, and relate to the functionality of the phone (update, charging, memory). Ads often have blurry pictures, promise winnings or breaking news, and lead to third-party sites when clicked.
What to do if the “Delete” button is not clicked?
Most likely, the application has received administrator rights. Go to Settings -> Security -> Device Administrators and uncheck the box next to the suspicious application. After that, you can remove it in the usual way.