If an Android smartphone or tablet starts acting weird, there is a small chance that the device has a virus. Today we will tell you how to remove a virus on Android and get rid of malware in the future.
Different ways to remove viruses on your phone and tablet and what they are
Viruses on Android are not so common, but they do exist. As a rule, they penetrate the system through programs of dubious origin, so it is better to download applications from official stores, for example Google Play.
Those whose gadget crashes due to the actions of malicious applications will find in the article a useful description of how to enter safe mode and, if necessary, restrict the rights of the program, and then remove the virus.
If this option does not work, you can try a factory reset, although without a previously created backup of the system, it is better not to do this.
Before moving on to the main part of the article, I would like to focus on the fact that there are no viruses on Android smartphones or tablets in the usual sense of the word.
Most often, the actions of a virus consist in showing ads that say that the device is infected, and to remove the virus, you need to download some application or in the slow operation of the device.
Android without viruses - how is it possible?
- Do not install apps: do not install apps from unknown sources unless you are confident in their reliability. In general, the installation lock function third party applications usually disabled by default. Enabled in the settings of the smartphone or tablet. Open "Settings", then go to the "Security" section and uncheck the box next to the line "Unknown sources".
- Refrain from installing clone applications: Even if you only download apps from Google Play, apps from malicious code may meet there. Therefore, you should not download clone applications from unknown developers, as well as applications that simply do not perform their functions.
- Check application permissions: no matter where the application is downloaded from, before installing it, you need to check which functions and services it requests access to. In no case should you give the program administrator rights, since in this case there will be some difficulties with the removal. You should be alerted if the video player for some reason requests access to contacts. You can also search the web for reviews of the app or go to the developer's website to get a better idea of the app.
- Update system: maybe the most latest version operating system Android and won't be available for your device, however it's a good idea to make sure it's as up-to-date as possible. Accordingly, it is worth giving preference to the manufacturer that regularly releases updates for the software of their device (for example, Nokia).
- Install antivirus: on Android, you can do without an antivirus, but for those who are worried about how not to pick up a virus, it will be clearly calmer with it. Also, antivirus applications, as a rule, in addition to the main one, have several additional useful features. Keep in mind that Android antivirus may have false positives, which you can ignore if you are sure that the application is clean.
How to get rid of a virus on Android
We enter safe mode on a smartphone or tablet. In this mode, applications from third-party developers will not be able to start, including those with malicious code.
On many devices, to call up the power off menu, you need to press and hold the power button, then select "Power off" and the device will turn on after rebooting. safe mode.
If you can’t enter safe mode according to our description, open Google and enter “How to enter safe mode on [write your device model here]” and follow the instructions found.
Booting into safe mode, we see the inscription "Safe Mode" in the lower left part of the screen.
Application settings
Open "Settings", go to "Applications" and go to the "Downloaded" or "Third Party" tab.
We come here because it is highly likely that the user will find out about the application, after installing which the gadget began to fail, comparing the time of occurrence of failures and the time of installing a new application.
If you don’t know which application is interfering with the normal operation of your smartphone or tablet, you should go through the list of all applications and find some suspicious one or one that you didn’t install at all.
We click on the malicious application and we get to the screen with information about it, click "Delete".
In most cases, this action is sufficient to remove the virus, but it may also be that the "Remove" button is not available.
This happens because the application has administrator rights.
Then we exit the "Applications" section, return to "Settings", go to "Security" and look for the line "Device Administrators". All applications with administrative rights are stored here in the form of a list.
- Just uncheck the app you want to uninstall.
- We return to "Applications" and see that we can now delete the application.
- The virus has been removed, it remains only to reboot the device to switch to normal mode.
The problem has been fixed, but it would not be superfluous to create backup important data on your device and install an antivirus for preventive protection.
Viruses can be of two types:
1. Fake - the name and icon of some well-known application is used, but inside there is only malicious code. Most viruses are of this type.
2. Trojan horse - malicious code is added to a normal application that works together with the application.
What can viruses do
1. Steal money from the SIM card: call or send SMS to paid numbers until the SIM card runs out of money.
2. Steal information: send passwords from Internet banks, data bank cards or personal files to scammers, send messages with viral links to numbers from the address book on your behalf.
3. Block the normal operation of the device: display a ransomware banner that prevents the device from being used.
4. Use the power of your device: show hidden ads or mine cryptocurrencies.
How viruses get on a smartphone or tablet
Fraudsters disguise viruses as harmless applications and files: browsers, players, games, navigators, books, antiviruses. They then distribute them:
1. On sites for adults, sites with hacked applications and pirated movies, torrent trackers, etc.
For example, you search the Internet for some game or program, and you find yourself on a forum. someone left desired link and everyone thanks him.
In fact, the forum and commentators are not real.
Or visit a site with pirated movies and series, a message appears. It says that the smartphone / tablet is infected with viruses or some program is very outdated. It even happens that the device starts to vibrate or make strange sounds.
In fact, this is not the case and everything is in order with the device.
2. By SMS, MMS and email
As a rule, these are SMS from “girls from dating sites”, from free classifieds sites, letters from “notaries from Germany”, messages about winning the lottery.
Be careful, there are no miracles. Most of the time they are scammers.
All such messages have a common goal - to get you to click on a link so that the virus is downloaded to your device.
How viruses infect a smartphone or tablet
In order for the virus to start working, it is not enough to download it - you also need to install it. Viruses are usually downloaded to the Downloads folder and look like application installation files with an "apk" extension.
If you click on a virus, a list of permissions will appear. Permissions are the actions that the application will be able to perform after installation.
If you click "Install", the virus will install and start working.
How to distinguish a virus from a normal application
Most viruses are written by non-professionals who want to get money quickly and without any problems with the law. Therefore, the standard signs of such viruses are permissions to send messages or calls. When such a virus is installed, it will silently send SMS or call paid numbers.
Let's compare real applications and viruses. Dr.Web anti-virus:
Permissions of the original antivirus from Play Store
Permissions of a virus that pretends to be an antivirus
Yandex Navigator:
Permissions of the original navigator from the Play Store
Permissions of a virus that pretends to be a navigator
Game Talking Tom 2:
Permissions original game Volume 2 from Play Store
Permissions of the virus that impersonates the game Volume 2
Of course, not all applications that request access to calls and messages are viruses. And not all viruses request access to paid features.
If scammers want to shoot with your camera, you will need access to the camera and the Internet.
If your files are required, they will ask for access to memory and the Internet.
If they want to block the screen with a banner, they will ask for administrator rights.
And some viruses generally know how to hide permissions during installation.
It is difficult to identify a well-made virus - or you need to look source applications, or install a virus on the device, remove logs from it (incident log) and understand them. Fortunately, such viruses are rare. More often you will need two guidelines:
If the application was downloaded from an unknown site and requests access to paid features, this is a virus in 99% of cases.
How to protect your smartphone or tablet from viruses
1. Install apps only from the Play Store and choose them seriously
It is very difficult for an unprepared person to distinguish a virus from a normal application. To protect users, Google made a special catalog with applications - Play Store.
Before adding an app to the Play Store, Google checks if it contains malicious code. Users who download apps from the Play Store are more secure than those who download apps from different sites and forums. But remember that nothing is completely safe, so take your choice of applications seriously: carefully read the permissions and look at the ratings.
2. Do not follow unknown links in SMS, MMS or mail
Fraudsters even learned how to fake numbers and addresses Email, so messages with viral links can also come from your friends.
3. Do not root your device or install unofficial firmware
If the device is rooted, the virus will be able to register itself in system applications and then only a complete flashing of the device can remove it.
4. Disable auto-receipt of MMS on your device
Fraudsters can automatically download viruses to your device via MMS. This is due to vulnerabilities in the Stagefright library.
To disable MMS auto download select: Messages → Options → Settings → (Advanced) → MMS → Auto receive (Auto download) → Disable.
5. Do not activate the banking service "Autopayment" (automatic replenishment of the balance of the phone number when it drops to a certain amount)
If suddenly a virus that sends SMS to paid numbers gets on the device, the balance of the SIM card will be replenished until the money on the card runs out. Messages from the bank are usually blocked.
Tip: To receive messages from banks and other important senders, buy a separate number that no one will know and a simple phone.
How to understand that a virus has appeared on a smartphone or tablet
There are no clear signs, it all depends on the virus. Some are noticeable immediately after installation (a banner appears and access to the device is blocked), others may for a long time do not give yourself away. In most cases, the symptoms are:
- Large bills for SMS or calls appear;
- A banner appears demanding to pay scammers, which prevents the device from being used;
- Unfamiliar programs appear;
- The battery starts to drain very quickly;
- Internet traffic is quickly consumed by incomprehensible applications;
- The device starts to slow down a lot.
How to remove a virus if the menu opens
How to remove a virus if the menu does not open (ransomware banner)
If a ransomware banner appears on the screen and prevents you from using the device:
Do not transfer money to scammers - they still will not unlock the device.
Remove the SIM card so that money is not debited from the account.
Boot your device in safe mode.
If the banner disappears in safe mode, disable administrator rights for all applications.
If the banner is not gone, go to step #11.
view all installed applications and delete the ones you don't know.
Reboot your device. The device will boot into normal mode, the banner should not be.
If the banner appears after the reboot, go to step #11.
Download an antivirus you trust over Wi-Fi from the Play Store.
The device of viruses and the mechanisms of operation of antiviruses change daily, so it is impossible to recommend any particular antivirus. Focus on the ratings of other users and reviews. According to the author, good antiviruses: Eset, Kaspersky and Dr. Web.
Check your device with an antivirus and remove any viruses found.
Remove the antivirus you have installed.
Download another antivirus and check your device again.
If a previous options does not help, reset the device data.
If you cannot cope with the virus on your own, contact service center Samsung.
Do I need an antivirus on Android
If you are a novice user and are not confident in your abilities, you need it. But only one.
If you use the device carefully and follow the safety rules, you can not install the antivirus.
Why is your mobile phone suddenly began to behave differently than usual, or even “healed” his “life”? Perhaps because a malicious program has settled in it. Today, the number of viruses and trojans for Android is growing exponentially. Why? Yes, because the cunning virus writers know that smartphones and tablets are increasingly being used by our fellow citizens as electronic wallets, and they are doing everything to move funds from the owners' accounts into their pockets. Let's talk about how to understand that a mobile device has picked up an infection, how to remove a virus from Android and protect yourself from re-infection.
Symptoms of a virus infection on an Android device
- The gadget turns on longer than usual, slows down or suddenly reboots.
- In the history of SMS and phone calls, there are outgoing messages and calls that you did not make.
- Money is debited from your phone account by itself.
- Ads appear on the desktop or in the browser that are not associated with any application or site.
- Programs are installed by themselves, Wi-Fi, Bluetooth or a camera are turned on.
- Lost access to electronic wallets, mobile banking, or for unknown reasons, the amount in the accounts has decreased.
- Someone took over your account in social networks or instant messengers (if used on a mobile device).
- The gadget is blocked, and a message is displayed on the screen that you have violated something and must pay a fine or simply transfer money to someone for unlocking it.
- Applications suddenly stopped running, access to folders and files was lost, any device functions were blocked (for example, buttons are not pressed).
- When you start programs, messages pop up, like "an error occurred in the com.android.systemUI application."
- Unknown icons appeared in the application list, and unknown processes appeared in the task manager.
- The anti-virus program informs you about the detection of malicious objects.
- The anti-virus program was accidentally deleted from the device or does not start.
- Your phone or tablet battery is draining faster than usual.
Not all of these symptoms are 100% indicative of a virus, but each is a reason to immediately scan your device for infection.
The easiest way to remove a mobile virus
If the gadget has remained operational, the easiest way is to remove the virus using the installed on android antivirus. Run a full scan of the phone's flash memory, if a malicious object is detected, select the "Delete" option, saving the neutralized copy in quarantine (in case the antivirus mistook something safe for a virus).
Unfortunately, this method helps in about 30-40% of cases, since most malicious objects actively resist their removal. But there is control over them too. Next, we will look at options for when:
- the antivirus does not start, does not detect or remove the source of the problem;
- the malicious program is restored after removal;
- the device (or its individual functions) is blocked.
Removing malware in safe mode
If you can't clean your phone or tablet normally, try using the safe mode. The bulk of malicious programs (not only mobile ones) do not show any activity in safe mode and do not prevent destruction.
To boot the device into safe mode, press the on/off button, put your finger on "Power off" and hold it until the message "Entering safe mode" appears. After that click OK.
If you have an old android version- 4.0 and below, turn off the gadget in the usual way and turn it back on. When the Android logo appears on the screen, press the Volume Up and Volume Down keys at the same time. Hold them until the machine boots up completely.
While in safe mode, scan your device with an antivirus. If there is no antivirus or it does not start for some reason, install (or reinstall) it from Google Play.
In this way, advertising viruses such as Android.Gmobi 1 and Android.Gmobi.3 (according to Dr. Web classification) are successfully removed, which download various programs to the phone (in order to increase the rating), and also display banners and ads on the desktop.
If you have superuser (root) rights and know exactly what caused the problem, run file manager(for example, Root explorer), follow the path of the location of this file and delete it. Most often, mobile viruses and trojans place their bodies (executable files with the .apk extension) in the system/app directory.
To switch to normal mode, simply reboot the device.
Removing mobile viruses through a computer
Removing viruses on the phone through a computer helps out when the mobile antivirus does not cope with its task even in safe mode or the device functions are partially blocked.
It is also possible to remove a virus from a tablet and phone using a computer in two ways:
- using an antivirus installed on a PC;
- manually through a file manager for Android gadgets, for example, Android Commander.
Using an antivirus on a computer
To check files mobile device antivirus installed on your computer, connect your phone or tablet to the PC with a USB cable, choosing the "As a USB drive" method.
Then turn on USB.
After that, 2 additional "disks" will appear in the "Computer" folder on the PC - inner memory phone and SD card. To start scanning, open context menu each disk and click "Check for viruses".
Removing malware using Android Commander
Android Commander is a program for exchanging files between a mobile android gadget and a PC. Running on a computer, it provides the owner with access to the memory of a tablet or phone, allows you to copy, move and delete any data.
For full access to all the contents of the android gadget, you must first obtain root rights and enable USB debugging. The latter is activated through the service application "Settings" - "System" - "Developer Options".
Next, connect the gadget to the PC as a USB drive and run Android Commander with administrator rights. In it, unlike Windows Explorer, protected system files and Android OS directories - the same as, for example, in root explorer- file manager for root users.
The right half of the Android Commander window shows the directories of the mobile device. Find the executable file of the application (with the .apk extension) that is causing the problem in them and delete it. Alternatively, copy suspicious folders from your phone to your computer and scan each of them with an antivirus.
What to do if the virus is not removed
If the above operations did not lead to anything, the malware still makes itself felt, and also if the operating system has ceased to function normally after cleaning, you will have to resort to one of the radical measures:
- reset with restoration of factory settings through the system menu;
- hard reset through the Recovery menu;
- flashing the device.
Any of these methods will bring the device to a state as after purchase - there will be no user programs left on it, personal settings, files and other information (data about SMS, calls, etc.). Your account will also be deleted. Google entry. Therefore, if possible, transfer the phone book to the SIM card and copy paid apps and other valuable objects to external media. It is advisable to do this manually - without using special programs so as not to accidentally copy the virus. After that, proceed to the "treatment".
Restoring factory settings through the system menu
This option is the easiest. It can be used when the functions of the operating system and the device itself are not blocked.
Go to the "Settings" application, open the "Personal" section - " Backup” and select “Reset with factory settings”.
Hard reset via Recovery menu
A “hard” reset will help deal with malware if it is not removed by any of the above methods or has blocked the login. To our delight, access to the Recovery menu (system restore) is preserved.
Login to Recovery on different phones and tablets are carried out in their own way. On some, you need to hold down the “Volume +” key when turning it on, on others - “Volume -”, on the third - press a special recessed button, etc. The exact information is contained in the instructions for the device.
In the Recovery menu, select the option "wipe data / factory reset" or simply "factory reset".
Flashing
Flashing is essentially a reinstallation of the Android OS, the same extreme measure as reinstalling Windows on the computer. It is resorted to in exceptional cases, for example, when a certain Chinese virus is embedded directly into the firmware and lives on the device from the moment it was “born”. One such malware is spyware. android program spy 128 origin.
To flash a phone or tablet, you will need root rights, a distribution kit (the firmware itself), an installation program, a computer with a USB cable, or an SD card. Remember that each gadget model has its own, individual firmware versions. They usually come with installation instructions.
How to Avoid Virus Infection of Android Devices
- Install mobile applications only from trusted sources, refuse hacked programs.
- Update your device as system updates are released - in them, developers close vulnerabilities that are used by viruses and trojans.
- Install a mobile antivirus and keep it always on.
- If the gadget serves as your wallet, do not let other people access the Internet from it or open unverified files on it.
Good time!
Many viruses on the phone are insidious in that for the time being they do not manifest themselves in any way: until suddenly you find that the funds on the mobile have disappeared somewhere. This is where doubts creep in, and whether Android has picked up some kind of virus ...
In general, the most common signs of Android infection are:
- pop up banners, intrusive adware(where it has never been before);
- loss of money from the balance of the phone;
- frequent freezes of the device, reboots;
- spontaneous installation and updating of applications;
- inability to visit certain sites, etc.
I should note that at present the number of viruses for Android devices is growing in some progression (apparently due to the fact that it is easier to "profit" from a phone than from a PC).
In general, in this article I want to consider several simple and effective options for removing viruses from Android devices (phone, tablet). I will also give the most common tricks and tricks of virus writers, the main protection measures to counter them.
I hope the information will help you get your device back in working order and save money. Now, more to the point...
If the menu opens and apps can be installed
Using antivirus on Android
This is perhaps the most obvious and fast way(will help against most viruses).
The algorithm of actions is approximately the following:
Unfortunately, some viruses cannot be removed in this way (they can actively block some functions of security software and interfere with cleaning).
Addition!
Some viruses block access to Google Play market. In this case, to download the antivirus, use its analogues:
Using Antivirus on a computer
Some Android phones can be connected to a computer as USB stick(note: and if it is a USB drive, it means that it can be checked for viruses, like the most ordinary disk!).
Algorithm:
If some menus and settings do not open
More problematic. Often with it, part of the user data is lost. I recommend that before resetting the phone, try booting it in safe mode (very similar to safe mode). windows mode: Only the most necessary applications will also be downloaded, without which the norms cannot be carried out. phone work).
Removing through safe mode
A lot of virus software works normally in normal phone mode, and absolutely cannot in safe mode (for example, various banners, pop-up and blinking messages, browser add-ons, etc. "garbage").
To enter safe mode:
- press and hold the power button so that the service menu appears with a suggestion to turn off / restart the phone;
- then "shutdown" (not to be confused with the physical button on the side of the phone) hold and hold for 2-5 seconds;
- a window should appear asking you to switch to safe mode - just click OK. See example below.
Note: To exit safe mode, simply restart your device.
In safe mode, you can also go to the Google Play Market, download an antivirus and check your phone with it (moreover, since the phone started with a minimal set of software, most likely, no pop-up windows and banners will bother you!).
Screenshot example below. Please note that when you boot your phone in safe mode - you will see a notification about this at the bottom of the window (some applications will be unavailable (gray icons)).
Reset phone (Hard Reset)
This method should help even in the most difficult situations. I draw your attention to the fact that after the reset, all your previous data and settings will be deleted (together with viruses), i.e. the phone will return to the initial state(as it was new when purchased).
How to reset:
Addition!
Detailed instructions for resetting Android settings to factory presets (the article will help you delete all data from your phone and tablet (including viruses)) -
Prevention measures (how not to infect your phone in the future)
In most cases, the infection of the phone occurs due to the inattention or carelessness of the user. Many, visiting various entertainment sites (torrents, sites for making money, game collections, etc.), do not pay attention to some messages, and easily "fall" into the bait of scammers. Below are some typical examples.
Let's say you are looking for some file and want to download it (in general, an ordinary situation). You come across a forum where the first message contains a link to the file, and then 10-15 people. actively thank the author of the topic. In 99% of cases, this is a scam, after downloading and running the file: you will either send a paid SMS (you will get a subscription), or you will catch some kind of virus.
Also, be very careful when installing games. Android during installation, by the way, always shows what permissions are required for a particular application. Please note that a fake game (most likely it is infected with some kind of "good") requires permission to send SMS (of course, after permission to install it, you will lose part of your mobile balance).
By the way, even if you yourself do not visit various "gray" sites, it may happen that scammers will send you an ill-fated SMS to your phone. Most often, this may be due to the most popular sites: VK, OK, Avito, etc. (after all, many have a profile there, and it is quite easy to interest an inexperienced person).
According to statistics, 2-5 people will click on the message below. out of 100!
Another extremely popular method of infection is various offers to check the device for viruses, or speed up its performance (some promise as much as 2-3 times!). Naturally, these are all fake messages.
If you want to check the device for viruses - go to the Play Market, download an antivirus from a well-known manufacturer, and check the phone with it (and do not agree to various "good" offers).
- try to install applications only from (and preferably only well-known developers);
- don't get root rights (if the virus gets to them, it will be much more difficult to remove it);
- install one of them on your phone (and check the device regularly);
- do not follow suspicious links, do not agree to various "anti-virus" checks on little-known sites, etc. (I have considered some of the "tricks" above);
- install on the phone or other protection from "extraneous" hands;
- do not connect bank account management via SMS, auto-replenishment (for example, if a virus starts sending paid SMS- then the bank auto-payment will "help" him empty your account).
In general, personally, I would give one more piece of advice: for work, get yourself a simple and most regular phone; for entertainment - use Android with dozens of apps. In my opinion, such a measure will seriously protect your funds and nerves.
That's all. Additions on the topic are welcome!
If your device started to work poorly, live its own life, then most likely your phone has caught a virus.
The main "symptoms" of an Android device being infected with a virus:
- the phone turns on longer than usual;
- there are numbers unfamiliar to you in the call list;
- excess funds are deducted from the account;
- you are unable to use your electronic wallets and other financial management systems;
- your social media pages are used to send prohibited material or spam.
- the battery will be discharged much faster, because the virus program consumes a lot of energy.
Remove viruses with 360 Security Lite
by the most in a simple way"Treating" an android device from malicious files and programs is cleaning it with an antivirus program.
360 Security Lite- one of the most popular antivirus programs for Android devices. In order to clean your device or provide future protection, you should:
1. Install.
2. After installing the application, click on the icon on the desktop, and run the program.
3. In the Anti-Virus tab, click the Scan button.
4. The app will start scanning your device for viruses.
5. The next step is to remove the malware software. If you find something - no quarantines are needed - immediately put the switch on all to the delete position.
Note: I think it's obvious to everyone that this method only works if the android device is fully functional. The same applies to other antivirus programs.
Using Avast Mobile
Another good antivirus application is Mobile Security & Antivirus Avast. How to use it, read below.
1) Download the application from the official site or install.
2) Mark that you are familiar with license agreement and privacy policy.
3) Go to Smart check - Check device.
4) Anti-Virus will immediately start updating virus databases.
5. After the scan is completed, you will be prompted to choose actions in relation to threats. Now the antivirus will monitor your device.
Treatment in safe mode
The thing is that the vast majority of virus programs do not work in safe mode. This means that if you start the device in this mode, the virus simply will not work, respectively, it can be easily removed.
To start safe mode, follow these steps:
1. Hold down the power button of the device.
2. Hold your finger on "Disable Device" until you see this message:
Once your Android device is in safe mode, scan it with an antivirus and remove it malware. If antivirus program does not start, reinstall it by downloading it again from the Google Play Market.
How not to catch the virus again - prevention
To prevent viruses from infecting your device, follow these tips:
- install applications of any kind only from trusted sources, for example, from the Google Play Market, here administrators carefully check their content;
- install from sites you trust - for example: site :-)
- always update the OS of your device;
- do not visit suspicious sites or click on links like "Your Android device is blocked" or "Viruses have been found on your phone", if you click on such messages, you will definitely acquire a virus.
Brief summary
In this article, I told you how to solve the problem of viruses on Android devices. I hope it will be useful to you, and you can easily get rid of unwanted and extraneous programs. Good luck!