descargarplaystore
EN

How to remove a virus from your Android phone

Reviewed on

Signs your phone has malware and how to get rid of it: Play Protect, safe mode, device admin apps, accessibility, fake alerts and factory reset.

Phone protected by a shield and a magnifying glass finding a virus

On Android, what people call a "virus" is almost always something else: adware that shows full-screen ads, spyware, or banking trojans that try to read your codes. The good news is that nearly all of it can be removed without losing photos or chats if you follow the steps in order.

Signs your phone has malware

  • Full-screen ads that pop up outside apps, even on the home screen.
  • Apps you don't remember installing, or icons that vanish right after you install something.
  • Battery or mobile data draining much faster than before.
  • The browser opening pages on its own or changing your search engine.
  • Texts sent, charges or subscriptions you don't recognize.
"Your phone has 4 viruses!" warnings that appear while browsing are almost never real. They're ads trying to get you to install a "cleaner" app. Close the tab and don't install anything from that warning.

Step by step

  1. Turn on airplane mode. The malicious app can't send data or download more while you hunt it down.
  2. Scan with Play Protect. Open Play StoreProfilePlay Protect and tap Scan (you'll need a connection for a moment). If it finds something, tap Uninstall. More in our Play Protect guide.
  3. Restart in safe mode. Press and hold the power button, then touch and hold Power off until Reboot to safe mode appears. Only system apps run in safe mode: if the ads stop, an app you installed is to blame.
  4. Uninstall anything suspicious. Go to SettingsAppsSee all apps and check what was installed around the time the problems started. Usual suspects: "cleaners", "boosters", flashlights, wallpapers and free VPNs from unknown developers.
  5. Remove admin rights. If Uninstall is greyed out, the app made itself a device admin. Turn that off in SettingsSecurity & privacyMore security settingsDevice admin apps (Samsung: SettingsSecurity and privacyOther security settingsDevice admin apps) and try again.
  6. Check Accessibility. Banking trojans ask for this permission to read your screen. In SettingsAccessibility, turn off any downloaded app you don't recognize.
  7. Clear browser notifications. Many "virus alerts" are notifications from sites you allowed. In Chrome: ChromeSettingsNotifications, then remove sites you don't know.
  8. Restart normally and scan again with Play Protect to confirm everything is clean.

If nothing works: factory reset

It's the last resort, but it removes malware in virtually every case. First back up photos and contacts to the cloud and make a WhatsApp backup. Then:

  • On Pixel and stock Android: SettingsSystemReset optionsErase all data.
  • On Samsung: SettingsGeneral managementResetFactory data reset.

When you set the phone up again, don't restore every app at once: reinstall only what you need, from Play Store.

If you used banking apps on the infected phone

Change your bank and Google passwords from another device, turn on 2-step verification and call your bank to review transactions. A banking trojan may have seen your credentials before you removed it.

How to keep it from coming back

  • Install apps from Play Store and, if you sideload an APK, check its signature.
  • Keep Play Protect on: since Play Store 53.9, the store reminds you to turn it back on if it's been off for a while.
  • Accept Android and security updates.
  • Be wary of any app that asks for Accessibility or admin rights without a clear reason.
  • For an extra layer, see which antivirus apps protect best in independent tests.

Frequently asked questions

Does a factory reset remove all viruses?
Almost always. The exception is malware preinstalled in the system of some very cheap, uncertified phones; it comes back after the reset and only a manufacturer update removes it.
Can my phone get a virus just by visiting a website?
On an updated Android phone it’s very rare. Usually the site shows fake alerts so you install an app; the real danger is installing what it offers.
Do I need an antivirus on top of Play Protect?
If you only install from Play Store and keep your phone updated, Play Protect is usually enough. An antivirus adds more if you sideload APKs or use a phone that no longer gets updates.