Your Android phone has started acting strangely. Random ads pop up when no app is open. The battery drains overnight. An app you never installed appears on the home screen. Or worse, the device feels sluggish and overheats for no clear reason. These are classic warning signs that malware has found its way onto your phone.
True self-replicating computer-style viruses are rare on Android. What most people call a “virus” is usually adware, spyware, a Trojan, or another form of malware. The good news is that the vast majority of these infections can be removed without a factory reset and without losing your photos, messages, or accounts. This guide walks you through the most effective, up-to-date process used by security researchers and Android support teams in 2026.
Signs Your Android Phone Has Malware
Before you start removing anything, confirm the problem. Look for these common indicators:
- Pop-up ads or full-screen advertisements that appear on the home screen or while using unrelated apps
- Apps you do not remember installing, or apps that reinstall themselves after deletion
- Sudden, unexplained battery drain or the phone running hot while idle
- Sluggish performance, frequent crashes, or apps taking much longer to open
- High data usage with no change in your habits
- Browser homepage or search engine changed without your action
- Unexpected text messages sent from your number or suspicious charges on your bill
- Device administrator or accessibility permissions granted to unknown apps
One symptom alone is not always proof. Several appearing together, especially after sideloading an app or clicking a suspicious link, strongly suggest malware.
Step-by-Step: How to Remove Malware from Your Android Phone
Work through these steps in order. Most people resolve the issue within the first four or five steps.
1. Disconnect from the Internet Immediately
Open the quick settings panel and turn on Airplane mode. This stops the malware from communicating with its servers, downloading additional components, or stealing more data while you clean the device. You will turn Airplane mode off briefly later for scans.
See More Posts in Jobs, Scholarships, Technology, Career/Motivations, Football News Feeds
Join Job Whatsapp Channel, Scholarship Whatsapp Channel, Tech Whatsapp Channel, Follow Our Twitter (X) Channel.
2. Boot into Safe Mode
Safe Mode starts Android with only the pre-installed system apps running. All third-party apps (including malware) are disabled. This is the single most important step because many malicious apps block their own uninstall or hide in normal mode.
General method (works on most modern phones):
- Press and hold the Power button until the power menu appears.
- On some recent phones (especially Google Pixel 6 and newer), press Power + Volume Up together.
- Press and hold the “Power off” option.
- When the Safe Mode prompt appears, tap OK or Safe Mode.
- The phone reboots. You will see “Safe mode” in the bottom-left corner of the screen.
Samsung Galaxy devices: Press and hold Power, then press and hold Power off until the Safe Mode option appears. Alternatively, power the phone off completely, then power it on while holding Volume Down until the Samsung logo appears and the device finishes booting.
Xiaomi, Redmi, or POCO (HyperOS/MIUI): Power off, then power on and hold Volume Down when the logo appears, or use the long-press Power off method in the power menu.
Once in Safe Mode, the problem usually disappears. This confirms a third-party app is responsible.
3. Revoke Dangerous Permissions First
Some malware grants itself Device Administrator rights or Accessibility access, which prevents normal uninstall. Check and disable these before deleting apps.
- Go to Settings → Security & privacy (or Security) → More security settings / Device admin apps.
- Look for any unfamiliar app. Tap it and select Deactivate.
- Also check Settings → Accessibility and Settings → Apps → Special app access → Notification access. Revoke access for anything suspicious.
4. Uninstall Suspicious Apps
Still in Safe Mode, open Settings → Apps → See all apps. Sort by install date or size if available. Look carefully for:
- Apps with generic or misspelled names
- Apps you do not remember installing
- Apps that request excessive permissions
- Apps installed around the time problems started
Tap the suspicious app → Uninstall. If the Uninstall button is grayed out, return to the Device admin list and deactivate it, then try again. You can also clear the app’s storage and cache first in some cases.
Remove any apps you no longer use as a precaution.
5. Run a Google Play Protect Scan
Google Play Protect is built into every Google-certified Android phone and scans all apps, including those sideloaded from outside the Play Store.
- Turn Airplane mode off temporarily so the scan can check Google’s latest threat database.
- Open the Google Play Store app.
- Tap your profile icon in the top-right corner.
- Tap Play Protect.
- Tap Scan.
- If any harmful apps are found, tap Uninstall on each one.
After the scan, tap the gear icon and confirm that “Scan apps with Play Protect” is turned on. Also enable “Improve harmful app detection” for stronger cloud-based analysis of unknown apps.
6. Restart Normally and Scan Again
Restart the phone to exit Safe Mode. Run another Play Protect scan. Install a reputable free antivirus app from the Play Store such as Malwarebytes or Bitdefender Mobile Security and run a full scan. These tools can catch threats that Play Protect misses, especially adware and spyware.
7. Clear Browser Data and Check for Browser Hijacks
If you still see unwanted redirects or ads in the browser:
- Open Chrome (or your default browser) → Settings → Privacy and security → Clear browsing data. Select Cached images and files, Cookies, and Site settings, then clear.
- Reset the browser to default settings if the option exists.
- Review installed browser extensions or “apps” that claim to be related to the browser and remove any you do not recognize.
8. Update Your System and Apps
Go to Settings → System → Software update (or System updates) and install any available Android and security patches. Then open the Play Store → profile icon → Manage apps & device → Updates available and update everything. Outdated software is one of the easiest ways malware gains a foothold.
9. Change Important Passwords
From a different, clean device (not the infected phone), change the passwords for your Google account, email, banking apps, and any other sensitive accounts. Enable two-factor authentication wherever possible. Check recent account activity for unauthorized logins.
See Also:
- How to Remove a Virus from Your Android Phone: The Complete 2026 Guide That Actually Works
- Your Phone Holds the Keys to Your Entire Life: How to Protect It from Hackers in 2026
- Why Is My Phone Overheating? The Real Causes and How to Fix It Fast
10. Factory Reset as a Last Resort
If symptoms continue after the steps above, a factory reset removes nearly all user-installed malware.
Important warnings:
- Back up photos, contacts, and important files first (do not back up suspicious APK files).
- Do not restore apps from a Google backup made while the phone was infected—malware can return that way. Set the phone up as new and reinstall only trusted apps from the Play Store.
- Path: Settings → System → Reset options → Erase all data (factory reset). Confirm and enter your PIN or password.
A factory reset is rarely needed for ordinary adware or spyware but is the most reliable final step.
How to Prevent Malware on Android in the Future
Prevention is far easier than removal. Follow these habits:
- Install apps only from the Google Play Store. Avoid unknown APK files from websites, messaging apps, or email.
- Keep Play Protect scanning enabled and install system updates promptly.
- Review app permissions regularly and revoke anything unnecessary (especially Accessibility and Device admin for non-essential apps).
- Avoid clicking links in unexpected texts or emails, and never install “cleaner,” “optimizer,” or “virus remover” apps recommended by pop-ups.
- Use a strong screen lock and consider enabling Advanced Protection Mode (available on newer Android versions under Security & privacy) for higher-risk users.
- Consider a lightweight, reputable security app for ongoing real-time protection if you frequently sideload or visit less-trusted sites.
Get More Tech Updates Here, Turn On Notifications🔔
See More Smartphone Hacks Here.
Frequently Asked Questions
Can I remove a virus from my Android phone for free?
Yes. Google Play Protect, Safe Mode, and the built-in settings tools handle the majority of cases at no cost.
Does a factory reset remove all malware?
It removes almost all user-installed malware. It will not remove rare firmware-level malware found on some very cheap, unbranded devices.
What if the phone is locked by ransomware?
Boot into Safe Mode if possible and uninstall the offending app. If the device is completely locked, contact the manufacturer or visit a repair shop; do not pay the ransom.
How long does the full process take?
Most users finish the core steps (Safe Mode, uninstall, Play Protect) in 15–30 minutes.
Final Thoughts
Android malware is common enough that nearly every user will encounter it at some point, yet it is also highly removable with the right sequence of steps. Start with Airplane mode and Safe Mode, revoke dangerous permissions, uninstall the rogue app, and run Play Protect. In the large majority of cases, that is all it takes to restore normal performance and security.
Stay vigilant about where you install apps, keep your system updated, and you will dramatically reduce the chance of dealing with this problem again. Your phone is only as secure as the apps you allow on it—treat new installations with the same caution you would give a USB stick from a stranger.