Removing a virus from an Android device

Viruses and malware for Android are rare, but they are. If you are concerned that your smartphone may be infected, read our article in which we detail how to remove a virus from your Android device and how you can protect yourself from future attacks.

In this article, we will cover the following topics:

  • How to install Kaspersky Antivirus for Android and use it to remove Android virus
  • How to remove malicious apps from an Android device manually
  • How viruses differ from Android malware
  • How to tell if your smartphone has a virus
  • How malware will affect your smartphone if it is not removed

How to remove a virus from an Android device

  • Download and install Kaspersky Internet Security for Android
  • Open the application and click "Continue" to allow access to system functions.
  • Tap Allow twice to allow the app to make and manage phone calls and access the files it needs on your phone.
  • Click Continue to allow the application to access your phone and storage to scan your device for threats.
  • Select the country where you live and click "Next".
  • Click “Accept and Continue” to accept the Kaspersky Lab License Agreement and the Kaspersky Security Network Statement.
  • Click Create Account, Set Up Account, or you can skip this step for now.
  • Click "Buy Now" to receive an "activation code" or "Use the free version".
  • The app is ready to test your phone. Click Start Checkout.
  • If a virus is found, click Remove. Now there are no viruses on your smartphone.

How to remove malware from an Android device

Is your phone behaving strangely? You may have downloaded a malicious application to it.

With Kaspersky Internet Security for Android, you can quickly detect and remove any malware. This is done manually, but if you do not know how, then this method may seem complicated and time-consuming to you.

Want to try? Follow the instructions to remove the malicious app from Android manually:

  • Put your phone into 'Safe Mode'

This step stops all third-party applications from starting. If your phone stops behaving strangely in Safe Mode, you can assume that the problem is caused by a malicious or faulty application.

  • Search for a malicious application

Select "Manage Apps" in Settings and view the apps you've downloaded. If any of them seem suspicious or you don't remember downloading them, they might be malicious applications.

  • Remove suspicious malware applications

Select the application you think is malicious and click Remove. If the button is grayed out, revoke Device Administrator access in the Device Administrators section of the Security section. Then you can uninstall the application.

Can a virus or malware get to Android

The terms "malware" and "virus" are often used interchangeably, but viruses are actually a type of malware. A computer virus is a malicious program that can reproduce itself on computers. This means that it copies itself and spreads throughout the computer system, causing harm and destruction of data. It can even disable the computer itself.

Now for Android devices: Unlike PCs, there are no self-replicating malware registered on Android smartphones. However, they do exist and come in various types. The most common are spyware and mobile ransomware. What is the difference? Spyware steals your personal information from third parties. Mobile ransomware blocks your devices or encrypts your data and then demands a ransom to decrypt it.

Kaspersky Internet Security for Android helps protect your phone from all types of Android malware. Moreover, it detects and removes malware if your smartphone is already infected.

How viruses infect Android smartphones

So how does Android malware infect your smartphone? There are three main ways malware gets to your mobile phone:

  1. Malicious applications Downloading a malicious application is the most common method of infection. Hackers disguise malware as popular or emerging applications and distribute them through app stores.
  2. Malicious ads In this case, the malware spreads through a clever scheme with online advertising. Clicking on an ad will infect your phone with malware.
  3. Infected links Hackers often send emails or SMS messages containing links to infected web pages. By clicking on them, you start downloading malware.

How to know if a virus has appeared on your Android smartphone

There are a number of signs indicating that your Android phone is infected with malware. Let's take a look at each of them separately.

Unfamiliar programs appear

Notice an application on your phone and don't remember that you installed it? The appearance of unfamiliar applications can be a sign of malware. Uninstall any app you don't recognize.

Apps malfunction

If the apps on your smartphone are malfunctioning for no apparent reason, this could be a sign of a malware infection.

Increased network traffic

Notice a strange increase in network traffic? If you haven't changed the way you use your phone, it could be caused by malware.

Phone bills have gone up

Some malware can send SMS messages without your knowledge. If you notice that your cell phone bill suddenly goes up due to a lot of messages, make sure the phone hasn't been jailbroken.

You see pop-ups when the browser is closed

Pop-ups and advertisements are annoying at best, and at worst, if they appear with your browser closed, means your phone may be infected with malware.

The battery runs out quickly

Malware can drain your battery quickly. If this happens, your smartphone may have been infected.

Your smartphone is overheating

If your smartphone gets hotter than usual, it could be a sign of malicious activity.

How to avoid malware infecting your Android device

Now you know how to detect and remove malware from your Android phone, but what can you do to prevent infection?

Here are some basic rules to follow to help you avoid infection:

Use antivirus protection for Android

Protect your phone with our Android Internet Security software. There is a free basic version that offers rudimentary protection, as well as a premium version with advanced security features for maximum and stronger protection.

Download apps only from the official Google Play Store

Downloading apps from a trusted source means you are significantly less likely to download malware than using untrusted sites.

Read developer information in descriptions

In the Google Play Store, it is extremely rare to find applications infected with malware, but nevertheless, this happens, so always read the information about the developer in the description.

Read user reviews of apps

Always read user reviews of the app. Overly enthusiastic reviews should be suspicious: they may be written by non-existent users. Real reviews tend to consider both the pros and cons of the program.

Check the number of app downloads

Apps with millions of downloads are unlikely to be malicious

Check what permissions the app is asking for

Does the requested permissions seem reasonable to you? If you think the requested permissions look suspicious, do not download the application or uninstall it if you have already installed it.

Don't click on unverified links

Mark all spam messages as junk and do not open them. If you accidentally open such a message, do not click on the links it contains.

Update your operating system regularly

Update your operating system regularly. This is to ensure that your Android smartphone is protected by the latest security updates.

Update your apps regularly

Updating all apps regularly will allow security updates to be installed both in the apps and on the Android device itself.

Be careful when using free Wi-Fi

Do not use online shopping and online banking systems while on public networks.

If you need to connect over free Wi-Fi, use a VPN connection, for example Kaspersky VPN Secure Connection : it protects your connection by encrypting your data.

How malware affects your smartphone

Malware can disrupt your device, such as freezing applications or overheating the phone itself. But worst of all, if Android viruses start stealing your money or personal data.

If you do not take action in time, malware can sign your smartphone to send messages to fraudulent short numbers, as a result of which your phone bills will grow many times over.

Malicious programs can collect personal information, such as banking information, and use it to steal your money. They can even send hackers records of your personal phone calls for blackmail purposes.

This is why it is imperative to take steps to keep your phone safe from malware. Follow our tips to protect your devices from Android malware and download our Internet Security solution for Android.

Worried that your Android smartphone might be infected with a virus? Remove malware with Kaspersky Antivirus for Android .

When you think of hackers, you probably think of two things: either large-scale attacks on businesses that cause multi-million dollar damage, or microfishing attacks that target the most vulnerable Internet users. If you, living in the era of the Internet, are confident in the complete security of your device, then sometimes it is difficult for you to imagine a virus wreaking havoc on your phone and secretly extracting your data.

But as the digital era shifted from desktop to mobile, so did hackers. Today, your cell phone can be as vulnerable as your laptop. So how do you know if your phone has a virus? Watch for clear signs of suboptimal performance, then troubleshoot effectively to remove the virus.

Can phones get infected with viruses?

The phone can get infected with a virus. As the popularity of smartphones surpassed computers as a personal device, hackers also exploited this trend: malware for mobile devices began to develop actively. While a traditional virus replicates itself at runtime, viruses on mobile devices target weaknesses in your operating system for data mining, financial gain, or network damage.

Communication capabilities are usually blocked between applications, but some applications have been scrutinized for mishandling of data, leaving their users more vulnerable to these types of attacks.

8 signs your phone is infected with a virus

While some viruses simply restrict the functionality of your phone, others have a more malicious intent to steal and delete your data or make unauthorized purchases on your behalf. It is often difficult to immediately recognize a virus, as malware can be dormant while you are using your phone in the usual way.

Some issues related to suboptimal phone performance are a common symptom of phone wear and tear. However, these symptoms can also be a sign that malware is running on your phone. If you have performance issues on your phone, troubleshoot by trying to remove the virus.

These 8 signs indicate that your phone may be infected with a virus:

  1. Overuse of data: An infected phone may have a virus that runs quietly in the background and can dramatically increase overall data usage.
  2. Fraudulent extortions: some forms of Trojans can increase your phone bill because can make purchases in certain apps themselves, subscribe to premium accounts, etc. - all this is the future income of hackers.
  3. Application crashes: if your phone is infected, it can lead to repeated crashes of applications. There are several reasons why applications will crash, so before assuming the worst, double check that your disk space is not full and you are not running too many applications at the same time.
  4. Popup windows: while some pop-ups are a normal function of advertising while browsing the web, but if your browser is closed and you are frequently shown pop-ups, then this could be a sign of adware on your phone - a type of malware that aims to data mining.
  5. The phone runs out of battery much faster: If a virus, such as malware, runs in the background during normal cellular use, then you may experience an inexplicably fast battery drain as your phone's RAM usage increases.
  6. Unknown applications: when you see applications that have appeared from nowhere, then they may be malicious programs (or appear as a result of the work of a malicious program). Trojans can also attach themselves to legitimate applications in order to inflict damage.
  7. Overheat: malware can consume a lot of RAM and CPU resources, which can cause your phone to overheat. While it is normal for your phone to overheat occasionally, constant overheating can be a sign of danger.
  8. Spam texts: A common form of malware that can be found on a mobile phone will collect sensitive data and try to infect your contacts as well by sending texts with dangerous links and attachments.

Types of mobile viruses

The most common mobile viruses are adware, ransomware, spyware, Trojans, and worms. While the term "virus" has become a widespread term for any kind of security threat, in fact, a virus is a specific form of malware, ie. this is just one type of technology threat.

Viruses can be hidden in legitimate attachments, fake emails, or infected attachments. Hackers are constantly improving their "craft" to infiltrate your device in unexpected ways to avoid detection.

  • Adware ( Adware ): While some pop-ups are an expected part of marketing campaigns, their spike could be a sign of adware. At best, they can be annoying. In the worst case, such malware can track your activity and gain access to your device to steal data.
  • Cryptographer ( Ransomware ): First appearing on desktop computers, ransomware encrypts personal information so that the user cannot access it. They then demand a ransom for access to encrypted files.
  • Spyware ( Spyware ): spyware often lurks in seemingly legal applications. The spyware is then downloaded to your device and monitors your activity, location, usernames and passwords. Most likely, you will not even notice that such a dangerous program appeared on your phone.
  • Trojan ( Trojan ): the trojan on your mobile phone usually appears as a text message. It will then send premium messages increasing your phone bill. More recently, for example, a banking Trojan infiltrated Android devices and began intercepting messages containing personal financial information.
  • The worm ( Worm ): Another virus that spreads via text messages is a worm that does not require user interaction to spread chaos. Its main goal is to spread itself to as many devices as possible so that hackers can download malware onto phones and steal data.

How to remove virus from iPhone

While the operating system on the iPhone is thought to be very secure, viruses can still overcome built-in security systems, especially on “reprogrammed” phones. To remove virus from iPhone, start by clearing data history. If the problem persists, restore your phone using an old backup. If you still see suspicious activity, reset your phone to factory settings (this will erase the saved data and the suspected virus).

Step 1: Clear your browsing data and history. Open settings, select your browser, click on the button to clear history and browse websites.

Step 2: Restore your phone using a backup. Open Settings, then Apple ID, select iCloud, then go to manage storage and backups. Choose the most recent backup and restore your device.

Step 3: Reset to factory settings. This should be the last resort. Open Settings and select the General section. There you can find a reset option with the option to delete all content and all settings. This will reset your phone to factory settings.

How to remove virus from Android phone

Because of its open source code, Android devices are particularly vulnerable to malicious attacks. Antivirus software is the most reliable way to keep your Android safe from viruses. To remove the virus from Android, first restart your device in Safe Mode.

Then open Settings and browse recently installed apps to try to find any suspicious activity. Remove any questionable programs and enable Play Protect. Scan your device periodically for threats and manage them as needed.

Step 1: Clear the cache. Select Apps & Notifications, then search for Chrome. Go to its storage and select the option to clear the cache.

Step 2: Boot your device into Safe Mode. Press and hold the power button. When the dialog box appears, select the option to restart in safe mode.

Step 3: find suspicious applications. Open Settings, select apps and browse installed apps to find any suspicious downloads. If you find a suspicious application, review the information about it and, if necessary, remove it.

Step 4: Turn on Play Protect - While antivirus is the safest way to protect your Android from malware, Play Protect is a built-in program that can be useful as a secondary protection measure. To enable it, select the Play Store app, open the menu in the upper left corner and enable the option to scan your device for security threats.

How to protect yourself from a phone virus

As your first line of defense, use antivirus software to keep your phone safe from malware. Be careful when installing new applications. Read the reviews and carefully read the terms and conditions of use of the program of interest, where access to personal data may be indicated. Back up your phone regularly so that you can restore the previous version if a virus does indeed infiltrate your device.

  • Download only verified apps: avoid third party app stores. This minimizes the risk of installing dangerous applications posing as legitimate software.
  • Use safe WiFi :Always use a secure Wi-Fi or VPN to protect you from hackers who would like to intercept your data stream to and from your phone.
  • Check the permissions for the app: read the terms and conditions of use before downloading an unfamiliar app. Please note that any suspicious application is capable of using personally identifiable information or changing the terms without prior notice.
  • Install antivirus software: antivirus is the best defense against mobile malware. Run anti-virus scans regularly and remove any detected threats.
  • Update your operating system: operating system updates often fix bugs found in previous versions of the operating system.
  • Don't open suspicious messages: malware can come in the form of email attachments, texts, and links. Do not click on unfamiliar links or messages, as they can be a gateway to phishing attacks.
  • Do not reprogram ( jailbreak ) your phone number: By leaving your phone in its original state, you will receive the necessary updates and patches for your operating system as iOS is constantly strengthening its security. When you jailbreak your phone, you become vulnerable to security holes found in previous versions, as well as the dangers that open source can pose.

Some viruses on mobile phones sleep until they are activated, which allows them to connect to as much user data as possible before they are detected. Antivirus software can protect your mobile devices from cyber attacks. Be vigilant when downloading new applications and look out for performance issues that may be signs of malware running on your mobile device.

Sources of :Threat Insight Report | IDG | Khalifa University | University of Cambridge | Hong Kong University

Panda Security in Russia and the CIS

+7 (495) 105 94 51, [email protected]

Malware on Android can not only turn a phone into a “brick”, mine cryptocurrency on your smartphone for cybercriminals, but also deprive the user of his funds and private data. That is why the question of how to remove a virus from a phone remains topical.

In this article, we will look at the signs of infection with different types of viruses, and also tell you what protection methods and antivirus applications can be used to remove them and then protect the device.

Signs of a virus on your phone

In most cases, detecting a virus on a smartphone is not a problem, and this is the result of the banal greed of malware creators. The recent popularization of cryptocurrency has led to miners becoming the most common viruses. And since the algorithms for mining cryptocurrency use the maximum computing power of the gadget, it is simply impossible not to notice this. However, a really good virus will do anything to avoid being identified. But software of this level is unlikely to get on your smartphone by accident, but the miner can be caught even on Google Play, but more on that later.

How to understand if there is a virus on the phone:

  • A sharp slowdown in the operation of the device. As a rule, even budget smartphones lose performance gradually, and therefore they can be comfortably used for several years. But a sharp slowdown in work should alert you.
  • Overheating of the device when idle. If your phone heats up while at rest or when starting a seemingly not too demanding game, then this is already a reason to think. You probably stumbled upon the aforementioned miner - a program that uses device resources to decrypt new blocks of the Blockchain network. In other words, someone makes money on you. But the work of the miner is possible only with a constant connection to the Internet, and if the problem persists even without access to the network, then the likelihood of problems with the smartphone itself is much higher.
  • An annoying advertisement in the system interface. A case not mentioned above, but no less serious. Advertising that is not tied to any of the installed applications is a sure sign that a virus is working. Do not think that this is just a harmless advertisement, since no one bothered the developer of this software to supplement his work, for example, with code that steals passwords.
  • Applications began to shut down spontaneously or work much worse.
  • Applications that you have not installed are constantly appearing in the device's memory.
  • Spam is sent from your number (or social media accounts).
factory reset android

How to clean your phone from viruses

Now let's look at all the ways to fight viruses - searching for them, removing them from the phone and preventing system infection.

We use antivirus

Most problems can be solved by antivirus 360 Security , among the features of which are the availability of tools for optimizing the device, as well as the full performance of the free version. The application works without asking for ROOT rights, which at the same time is both a plus and a minus thereof. On the one hand, the user does not need to carry out any additional manipulations, and on the other hand, the application's capabilities as an antivirus are somewhat limited. Nevertheless, 360 Security does a good job of dealing with common viruses, protecting the user from most threats.

You should also talk about a popular but ineffective method of protecting against viruses. Many sources on the Internet talk about getting rid of the phone from viruses through a computer. The prospect of a successful detection of a virus for the Android system by an antivirus developed for Windows is near-zero, there is no point in that.

Manual Virus Removal - Factory Reset

As a rule, the fight against the virus ends at the previous point, but if the infected software is not removed, all that remains is to use the Hard Reset - resetting the device to factory settings. When performing this operation, personal information will be deleted, including installed applications, files, etc. It should be understood that HR is a last resort.

factory reset android

For most models of Android smartphones, the method of resetting the settings through the Recovery mode is suitable. To activate it, you need to turn off the device, and then simultaneously hold down the power and volume down buttons (if it doesn't help, then google the way to switch to recovery for your smartphone model) To move through the list, use the volume control buttons. In this case, you need to select the wipe data / factory reset line.

Prevention and safety measures

It is much easier to prevent infection than to deal with the problem. The most obvious way to passively protect against viruses is to install an anti-virus program and scan your phone periodically. Also observe the following guidelines:

  • Don't install apps from unknown sources. These are programs that are NOT downloaded from Google Play. You search for APKs on unverified sites at your own risk. This is especially true of pirated versions of paid applications, since they are modified, and no one forbade the person who hacked them to insert something malicious into the code.
  • Read the permissions carefully. When installing the software, you are shown a list of permissions that must be given to it for full work. If you do not accept the terms, the installation simply will not start, however, you can find an alternative to any application that does not try to take suspiciously many phone functions under control. Of course, it is unlikely that an application from the TOPs of Google Play will carry a virus, but attackers often disguise malware as popular applications, slightly changing the icon or name.
  • Don't download files from suspicious sources. It can be ANY files, including pictures, music and more. This is especially true of SMS with strange links, which, according to the sender, lead to a photo or profile on a social network.
  • Be careful with auto payments. Many banks advise their clients to activate the service of automatic account replenishment when the balance decreases, but this can be a loophole for intruders. If malware has access to your SMS, calls and other functions, then it automatically receives a significant number of ways to steal funds from your account. This is how you can lose almost all the money from your bank card without noticing anything.
  • Don't install suspicious apps from Google Market. The fact is that Google moderation is far from being omnipotent, and malware often ends up even in the official app store. Be wary of little-known, new software, without feedback and ratings from users.

Thus, a virus problem on mobile devices is indeed dangerous for users, but in this article we have provided comprehensive information, using which you can easily protect yourself from malware, delete dangerous files and protect yourself in the future.

Read more interesting reviews and news about technologies on the website


The problem of the security of mobile devices is one of the most urgent today. There are many questions about the protection of personal data on your phone. Not everyone can find the answer to them. Most of the malicious programs are advertisements and banners, but even among them there are extremely unpleasant viruses, the purpose of which is to siphon money from your mobile account, make purchases and transfers from your bank card linked to your account, and copy your personal information: contacts , photo, video, SMS - messages. So how do you remove a virus from your phone? First, let's figure out how to understand that the device is infected:

  1. Advertising banners appear. This is an adware virus. Announcements, notifications come to the desktop, in the browser, even when you are not online.
  2. The smartphone downloads and installs applications on its own.
  3. Materials on the map or in the internal storage are not available: damaged or deleted.
  4. Some applications do not work correctly, "crash", spontaneously close.
  5. The phone overheats and runs out of battery quickly.
  6. There were SMS-mailings to unfamiliar numbers, advertising. This is an SMS virus that is dangerous with a possible leak of personal data.
как удалить вирус с телефона

The article describes tips on how to properly remove a virus from Android and more. Let's look at several options.

Antivirus check

The majority of users, hearing about the infection of their mobile phone with viral programs, begin to worry unreasonably. And in vain. Many problems can be solved by simple diagnostics of a smartphone with an antivirus that finds and removes 99% of all malicious programs, such as Trojan, spyware, ransomware. A huge array of viruses use similar program code, which makes them vulnerable. In order to choose a simple and reliable defender, we recommend that you first read reviews on Google Play. Do not forget to constantly update the databases, because every day about 200 new malicious programs appear in the world and, despite the similarity of the program code, they can bring many problems.

проверка телефона антивирусом

Scanning a smartphone via a computer

It's no secret that viruses that infect the PC operating system are much more diverse and more dangerous than their "younger brothers" on Android. Consider the same Petya virus that infected corporate computers around the world and inflicted enormous damage on asset management companies. It is because of such moments that antiviruses that protect your PC are much more powerful and productive. To check your mobile device using PC antivirus, in the Settings menu, check the box next to USB debugging. Then connect the smartphone to the computer via USB - cable and scan the PC with an antivirus. Despite the fact that mobile viruses have a different program code, the defender on the computer can easily cope with it.

Removing a virus manually

This removal option implies tracking malware through the Running Application Manager to identify the infected file. First you need to go to the "Settings" menu and open the "Application Manager". After that, find the "Running Applications" tab and see which ones are currently running.

удаление вируса с телефона

Be careful! When using this method, it is possible to close "healthy" system programs, which can lead to incorrect operation of the mobile OS. After you have found an unknown program, find the root folder with the infected .apk file and delete it. After all these operations, reboot the device.

Removing a virus from an Android phone in safe mode

Sometimes the program blocks the system functions of the device and the malicious file is not deleted. Then you need to go to safe mode, in which only system applications are launched. For this:

  • hold down the power key of your smartphone until a window appears asking you to turn off the device;
  • press with a long tap on the "Disable" option. The Go to Safe Mode icon will appear;
  • wait for the phone to reboot;
  • remove applications and files that you could not remove before.

The possibility that the activity of the remote malware will resume is minimal.

откат к заводским установкам на телефоне

Rollback to factory settings

Unless it can be removed by other means, this virus removal method is the most recent and most radical. When you use a factory rollback, all information stored on your smartphone will be destroyed, and the phone will return to its original form in which you purchased it. In order to save all the information, we recommend copying it either to the cloud storage or to your PC. This type of struggle is the simplest and most effective, and also suitable for "beginners".

How not to get infected?

It is impossible to protect one hundred percent from infected files, but you can significantly protect yourself from the possible risk. To do this, you should follow a few rules:

  1. Do not download files and applications from unknown sources. Unfamiliar sites, unknown links in emails - no.
  2. Read reviews about the application, about the document. If they are, of course.
  3. Check the device with an antivirus every week. It is possible to set up a regular automatic check, but sometimes it is still possible to control the process.
  4. Do not connect your phone to unverified PCs and other smartphones.
  5. There is no pre-check on Google Play, so both paid and free downloads may contain malware.


Viruses on a smartphone can be removed quite easily and quickly, but it is still better to avoid such situations and adhere to the security rules listed above.

How to find out if a smartphone is infected with a virus and how to remove an unremovable virus on Android through system settings or through a computer.

How to remove an unremovable virus on Android

Have you faced such a situation when a virus appeared on your Android smartphone, which was detected by an antivirus program, but it cannot be removed? Immediately you start to panic and worry that a malicious object will now delete all your data or provoke system malfunctions.

In fact, not everything is so scary. But it is also impossible to start the treatment of your mobile gadget. Such an unremovable virus is called a system virus, that is, it buried itself in the factory folders of the device and the cleaning program simply cannot extract it from there, so as not to damage the working files.

However, there are proven and effective ways to how to remove an unremovable virus on Android ... We will talk about them in this article. There is no point in being afraid and upset, everything is solvable and fixable without harming the working functions of your smartphone. And in order to avoid viruses and surf the Internet safely, use a free VPN for Google Chrome.

How to tell if your phone is infected

Of course? you may not always be able to detect a virus on your own or understand that it is present in the system. But, if the device's operation is slow, or suspicious notifications appear, or some kind of call redirection occurs, or phone bills have suddenly increased ... So it's time to think about your smartphone being infected with malware.

You can determine the malfunction and the presence of serious system viruses in gadgets on Android by the following signs:

  • turning on the device and the usual operations take more time, for no reason a reboot occurs;
  • SMS and phone calls may contain outgoing letters and calls that you did not make;
  • sudden withdrawal of funds from the account;
  • an advertisement appears in the browser or on the screen that has nothing to do with the site visited or the actions taken;
  • Wi-Fi, Bluetooth or camera can be automatically turned on;
  • I can't log into my e-wallet, mobile bank or other payment application;
  • suspicious activity on social media accounts;
  • arbitrary blocking of the gadget is possible, and a message is displayed on the screen that the owner of the device has violated the law;
  • applications do not start;
  • when entering any program, an error message is displayed;
  • the appearance of unknown icons in the list of programs;
  • the task manager can highlight unknown processes;
  • antivirus reports the presence of a virus;
  • antivirus disappeared from the smartphone
  • the battery runs out quickly.

How viruses get into Android

Before we figure it out, how to remove viruses from Android , it is important to understand how these malicious objects enter the device's system. This usually happens in two ways:

  • When downloading applications, games, programs or various instructions, various additional elements can be installed, which, although they do not contain malicious code, often perform hidden options that the developer does not inform about. Always carefully study the information before installing so as not to download the application that will take control of the entire system of your device;
  • the penetration of a virus when downloading programs and applications from suspicious or dubious sites that are not checked and are not placed in the Google Play catalog. It often happens that paid programs offered for download on third-party sites contain viruses or are generally malicious in themselves.

How to remove a virus from Android

Now we come to the most important question - how to remove a virus that cannot be removed ... If your smartphone continues to work, then the easiest way is to run an antivirus and clean the device from malicious content. However, this method is more effective in no more than 30-40% of cases, because many viruses "resist" the removal procedure.

Depending on the situation specific to your gadget, its own scheme of actions to combat the virus is applied. The situations are as follows:

  • the antivirus program does not detect the virus, does not remove it, or does not start at all;
  • after removal, the virus is restored again;
  • the smartphone is partially or completely blocked.

In the first and in the second case, it is necessary to start safe mode, since it is in this mode that viruses become inactive and they can be easily removed. You can find how to do this for your smartphone on the Internet, but usually it is done as follows:

  • hold down the on / off button of the smartphone and select "Power off";
  • keep the button pressed until the message about the transition to safe mode appears;
  • confirm the operation;
  • scan your device with antivirus;
  • if you have superuser rights, you can start the file manager and clear the system folders from malicious software;
  • when everything is ready, restart your smartphone and it will work in normal mode and without viruses.

In the third case, you will have to remove virus via computer ... To do this, you need to connect your smartphone to your computer via a USB cable and select the storage mode. After that, run a virus scan via the context menu for both disks: the phone's internal memory and the SD card.

How to remove a virus that cannot be removed

If all the methods described above do not help get rid of viruses, then radical cleaning measures must be taken:

  • reset settings to factory defaults;
  • apply option Hard reset through the menu Recovery ;
  • reflash a smartphone from a computer.

You can use any of the listed options.

How to avoid getting a virus

In order not to catch the virus, try to adhere to the following recommendations:

  • download all applications and programs from trusted sources, it is best to use only official markets;
  • use an antivirus program on your smartphone, it is better that it is always on;
  • Connect a quality VPN service that also effectively protects against viruses.


No one is safe from gadget virus infection, moreover, until a certain moment you may not even suspect that you have a malicious program installed. Follow the recommendations described in this article and try to always use only proven and safe programs.

Thanks for reading! Subscribe to my channels in Telegram , Yandex.Messenger и Yandex Zen ... Only there are the latest blog updates and news from the world of information technology.

Also, read me on social networks: Facebook , Twitter , VK OK .

Respect for the post! Thanks for your work!

Want more posts? Looking for technology news? Read reviews on gadgets? For all this, as well as for website promotion, purchase of a new design and payment for hosting, I need help from you, loyal and grateful readers. Read more about donations at special page .

There is an opportunity to become patron to support your blog with a donation every month, or use Yandex.Money , WebMoney , QIWI or PayPal :

Thank you in advance! All collected funds will be used for the development of the site. Project support is a gift to the site owner.

Share link:

Why did your mobile phone suddenly start behaving differently, or even “live” with its “life”? Perhaps because a malicious program has settled in it. Today the number of viruses and Trojans for Android is growing exponentially. Why? Yes, because the cunning guys-virus writers know that smartphones and tablets are increasingly used by our fellow citizens as electronic wallets, and they are doing everything to move funds from the accounts of the owners into their pockets. Let's talk about how to understand that a mobile device has caught an infection, how to remove a virus from Android and protect yourself from re-infections. вирус на андроид

Symptoms of a virus infection of an Android device

  • The gadget turns on for longer than usual, slows down or suddenly reboots.
  • The history of SMS and phone calls contains outgoing messages and calls that you did not make.
  • Money is debited from your phone account by itself.
  • Ads that are not associated with any application or site are displayed on your desktop or browser.
  • Programs are installed by themselves, Wi-Fi, Bluetooth or a camera are turned on.
  • Access to e-wallets, mobile banking has disappeared or, for unknown reasons, the amount on the accounts has decreased.
  • Someone has taken over your account on social networks or messengers (if used on a mobile device).
  • The gadget is locked, and a message is displayed on the screen that you have violated something and must pay a fine or simply transfer money to someone to unlock it.
  • Applications suddenly stopped starting, access to folders and files was lost, some device functions were blocked (for example, buttons were not pressed).
  • When launching programs, messages pop up like "an error has occurred in the application."
  • Unknown icons appeared in the application list, and unknown processes in the task manager.
  • The antivirus program informs you about the detection of malicious objects.
  • The antivirus program uninstalled itself from the device or does not start.
  • The battery of your phone or tablet is starting to drain faster than ever.

Not all of these symptoms are 100% indicative of a virus, but each is a reason to immediately scan your device for infection.

The easiest way to remove mobile virus

If the gadget is still working, the easiest way is to remove the virus using the antivirus installed on Android. Run a full scan of the phone's flash memory, if a malicious object is detected, select the "Delete" option, saving the neutralized copy in quarantine (in case the antivirus identifies itself and takes something safe for a virus).

сканирование приложений андроид

Unfortunately, this method helps in about 30-40% of cases, since most malicious objects actively resist being removed. But the rule exists on them. Next, we'll look at options for action when:

  • the antivirus does not start, does not detect or remove the source of the problem;
  • the malware is restored after deletion;
  • the device (or its individual functions) are locked.

Remove malware in safe mode

If you can't clean your phone or tablet normally, try Safely. The bulk of malicious programs (not only mobile ones) show no activity in safe mode and do not interfere with their destruction.

To boot the device in safe mode, press the on / off button, place your finger on “Power off” and hold it until the message “Entering safe mode” appears. Then click OK.

переход в безопасный режим

If you have an old version of Android - 4.0 or lower, turn off the gadget in the usual way and turn it on again. When the Android logo appears on the screen, press the volume up and down keys at the same time. Hold them until the device boots up completely.

While in safe mode, scan your device with antivirus. If there is no antivirus or it does not start for some reason, install (or reinstall) it from Google Play.

In this way, advertising viruses such as Android.Gmobi 1 and Android.Gmobi.3 (according to Dr. Web classification), which download various programs to the phone (in order to increase the rating), and also display banners and ads on the desktop, are successfully removed.

If you have superuser (root) rights and you know exactly what exactly caused the problem, start a file manager (for example, Root explorer), follow the path where this file is located and delete it. Most often, mobile viruses and Trojans place their bodies (executable files with the .apk extension) in the system / app directory.

To return to normal mode, simply reboot the device.

Removing mobile viruses from a computer

Removing viruses on the phone through a computer helps out when the mobile antivirus cannot cope with its task even in safe mode or the device's functions are partially blocked.

Removing a virus from a tablet and phone using a computer is also possible in two ways:

  • using antivirus installed on the PC;
  • manually through a file manager for Android gadgets, for example, Android Commander.

We use an antivirus on the computer

To check the files of the mobile device with the antivirus installed on the computer, connect the phone or tablet to the PC with a USB cable, choosing the "Like USB storage" method.

подключить как usb накопительNext turn on USB.

включить usb накопитель

After that, 2 additional "disks" will appear in the "Computer" folder on the PC - the internal memory of the phone and the SD card. To start scanning, open the context menu of each disk and click "Check for viruses".

контекстное меню проверить на вирусы

Removing malware via Android Commander

Android Commander is a program for exchanging files between an Android mobile gadget and a PC. Running on a computer, it provides the owner with access to the memory of the tablet or phone, allows you to copy, move and delete any data.

For full access to all the contents of an android gadget, you must first get root rights and enable USB debugging. The latter is activated through the service application "Options" - "System" - "Developer options".

включение отладки по usb

Next, connect the gadget to your PC as a USB drive and run Android Commander with administrator rights. In it, unlike Windows Explorer, protected system files and directories of the Android OS are displayed - just like, for example, in Root Explorer, a file manager for root users.

The right half of the Android Commander window shows the directories of the mobile device. Search them for the executable file of the application (with the .apk extension) that is causing the problem and delete it. Alternatively, copy suspicious folders from your phone to your computer and scan each of them with an antivirus.

окно Android Commander

What to do if the virus is not removed

If the above operations did not lead to anything, the malicious program still makes itself felt, and if the operating system after cleaning has ceased to function normally, you will have to resort to one of the radical measures:

  • reset with restoration of factory settings through the system menu;
  • hard reset via the Recovery menu;
  • flashing the device.

Any of these methods will bring the device to the state as after purchase - there will be no user programs, personal settings, files and other information (data about SMS, calls, etc.) on it. Your Google account will also be deleted. Therefore, if possible, transfer the phone book to the SIM card and copy paid applications and other valuable items to external media. It is advisable to do it manually - without using special programs, so as not to accidentally copy the virus. Then proceed to the "treatment".

Restoring factory settings through the system menu

This option is the simplest. It can be used when the functions of the operating system and the device itself are not locked.

Go to the "Settings" application, open the "Personal" - "Backup" section and select "Factory data reset".

Сброс с восстановлением заводских настроек

Hard reset via the Recovery menu

A "hard" reset will help to cope with malware if it cannot be removed by any of the above methods or if it has blocked the login. To our delight, access to the Recovery menu is still available.

Login to Recovery on different phones and tablets is done differently. On some, for this you need to hold down the "Volume +" key when turning on, on others - "Volume-", on the third - press a special recessed button, etc. The exact information is contained in the instructions for the device.

In the Recovery menu, select the option "wipe data / factory reset" or simply "factory reset".

factory reset androidFlashing

Flashing is essentially a reinstallation of the Android OS, the same last resort as reinstalling Windows on a computer. It is used in exceptional cases, for example, when a certain Chinese virus is embedded directly into the firmware and lives on the device from the moment of its "birth". One such malware is the android spy 128 origin spyware.

To flash a phone or tablet, you will need root rights, a distribution kit (the firmware itself), an installation program, a computer with a USB cable or an SD card. Remember that for each gadget model its own, individual firmware versions are released. Installation instructions are usually found along with them.

How to avoid virus infection of Android devices

  • Install mobile applications only from trusted sources, abandon hacked programs.
  • Update the device as system updates are released - in them, the developers fix vulnerabilities that are used by viruses and Trojans.
  • Install a mobile antivirus and keep it always on.
  • If the gadget serves as your wallet, do not allow other people to access the Internet or open unverified files on it.

Добавить комментарий