How to check for viruses on Android (and get rid of them)

Viruses and malware pose significant threats to Android devices, potentially compromising your personal data, privacy, and device performance. Despite Google’s security measures, malicious software can infiltrate your smartphone or tablet through unsecured websites, apps from unofficial sources, or phishing scams.

This guide will help you check for viruses on Android and eliminate potential threats, maintaining your device’s security and performance.

We’ll cover recognizing signs of malware, checking your device using built-in tools, removing any detected issues, and implementing practices to prevent future infections. Follow these steps to keep your Android device safe from malicious software.

Recognizing the signs of a virus infection on Android

Identifying potential malware on your Android device is crucial for timely intervention. Common indicators of infection include:

• Unusual battery drain: Your device’s battery depletes faster than normal, indicating a battery virus.
• Overheating: The device becomes excessively hot even with minimal use.
• Pop-up ads: Frequent and unexpected ads appear, even when apps are not in use.
• Unknown apps: Unfamiliar applications are installed without your knowledge.
• Data usage spikes: Unexplained increase in data consumption.
• Performance issues: The device is sluggish, freezes, or apps crash frequently.
• Unwanted redirects: The browser redirects you to suspicious websites or alters your homepage.
• Unexplained charges: Unexpected charges appear on your phone bill.

Check your Android device for malware if you notice any of these signs.

How to check for viruses on Android

1. Update Android OS to the latest version

Keeping your device updated ensures you have the latest security patches.

• Check for updates:
  • Go to Settings > System > System update (this may vary based on your device).
  • Tap Check for update.
  • If an update is available, follow the on-screen instructions to download and install it.

2. Restart your device in Safe Mode

Use Safe Mode to identify malicious apps Safe Mode helps you detect malware by:

• Running only essential system apps
• Disabling potentially harmful third-party apps
• Allowing you to observe if suspicious behavior stops

To use Safe Mode effectively:

1. Enter Safe Mode:
   • Press and hold the Power button
   • Touch and hold Power off
   • Tap OK to reboot into Safe Mode
2. Monitor your device for:
   • Improved performance
   • Reduced pop-ups
   • Normal battery consumption

If problems stop in Safe Mode, systematically uninstall recently installed apps to identify the culprit

3. Check your apps

Review installed apps for any unfamiliar or suspicious applications. If you’re unsure, search for the app’s name and other details online to see if anyone else has identified it as malware.

• View installed apps:
  • Go to Settings > Apps & notifications > See all apps.
• Uninstall unknown apps:
  • Select the suspicious app.
  • Tap Uninstall.
  • Confirm by tapping OK.

4. Scan your device with Google Play Protect

Google Play Protect scans your device for harmful apps.

• Use Play Protect:
  • Open the Google Play Store app.
  • Tap the Menu icon (three horizontal lines) and select Play Protect.
  • Tap Scan to check for threats.
  • Review any harmful apps detected and remove them.

5. Install a reputable mobile security app

Security apps can provide additional protection and scanning capabilities.

• Choose reputable apps:
• Download from Google Play Store:
  • Open the Google Play Store, search for the app, and install.
• Run a scan:
  • Open the security app and perform a full device scan.
  • Follow the app’s instructions to remove any detected viruses.

How to remove viruses from your Android device

If malware is detected or suspected, take these steps to remove it:

1. Uninstall malicious apps

• Identify the app:
  • Often, the app causing issues is recently installed.
• Uninstall in Safe Mode:
  • Boot into Safe Mode (see Steps to check for viruses).
  • Go to Settings > Apps & notifications > See all apps.
  • Select the malicious app and tap Uninstall.

2. Remove suspicious files

• Use a file manager:
  • Access your device’s File Manager app.
  • Navigate to Downloads or other folders where malicious files may reside.
• Delete unknown files:
  • Select and delete any files you didn’t download or that seem suspicious.

3. Disable pop-up and redirects in browsers

• Chrome Browser:
  • Open Chrome.
  • Tap the Menu icon and select Settings.
  • Go to Site settings.
  • Tap Pop-ups and redirects and toggle off.
  • Tap Ads and toggle off Allowed.

4. Clear app caches and data

Removing cached data and deleting cookies can eliminate malicious scripts hidden within app files.

• Clear cache and data:
  • Go to Settings > Storage > Internal Storage.
  • Tap on Cached data and confirm to clear.
  • For individual apps:
    • Go to Settings > Apps & notifications > See all apps.
    • Select an app.
    • Tap Storage & cache.
    • Tap Clear Cache and Clear Storage/Data.

5. Update all apps

Keeping apps updated can fix security vulnerabilities.

• Update apps:
  • Open the Google Play Store.
  • Tap the Menu icon and select My apps & games.
  • Tap Update All.

6. Reset app preferences

Resetting app preferences can fix settings changed by malware.

• Reset preferences:
  • Go to Settings > Apps & notifications.
  • Tap See all apps.
  • Tap the Menu icon (three dots) and select Reset app preferences.
  • Confirm by tapping Reset apps.

7. Remove administrator access from suspicious apps

Some threatware gains device administrator rights, making it harder to remove.

• Check device administrators:
  • Go to Settings > Security > Device admin apps (this may vary).
  • Look for unfamiliar apps with admin rights.
• Disable admin rights:
  • Uncheck the app to disable admin access.
  • Confirm any prompts.

8. Clear browsing data

Removing website data can eliminate malicious cookies or scripts.

• Chrome Browser:
  • Open Chrome.
  • Tap the Menu icon (three dots) and select History.
  • Tap Clear browsing data.
  • Choose All time for the time range.
  • Check Browsing history, Cookies and site data, and Cached images and files.
  • Tap Clear data.
• Other browsers:
  • Open the browser app and locate settings to clear history and data.

9. Reset your device to factory settings (if necessary)

If malware persists, a factory reset may be required.

• Backup your data:
  • Go to Settings > System > Backup.
  • Ensure Back up to Google Drive is toggled on.
• Perform factory reset:
  • Go to Settings > System > Reset options.
  • Tap Erase all data (factory reset).
  • Confirm by tapping Reset Phone and entering your PIN/password.

How to prevent future virus infections

Implementing proactive measures can help keep your Android device secure.

Install apps only from the Google Play Store

• Avoid third-party sources:
  • Do not download apps from unofficial websites or repositories.
  • Google Play Store vets apps for security and compliance.

Keep Android OS and apps updated

• Enable automatic updates:
  • Go to Settings > System > Advanced > System update.
  • Ensure updates are set to download automatically.
• Auto-update apps:
  • Open Google Play Store.
  • Tap Menu > Settings.
  • Tap Auto-update apps and select Over Wi-Fi only or Over any network.

Be cautious with links and attachments

• Email and messages:
  • Do not click on links or download attachments from unknown senders.
  • Be wary of phishing attempts mimicking legitimate organizations.

Use strong, unique passwords

• Password management:
  • Create complex passwords with a mix of letters, numbers, and symbols.
  • Use a reputable password manager.
• Enable Two-Factor Authentication (2FA):
  • To access your Google account, go to myaccount.google.com/security.
  • Under Signing in to Google, select 2-Step Verification and follow the prompts.

Avoid rooting your device

• Maintain security:
  • Rooting removes built-in security features.
  • It makes your device more vulnerable to malware and viruses.

Regularly review app permissions

• App permissions:
  • Go to Settings > Privacy > Permission Manager.
  • Review permissions granted to apps.
  • Revoke any unnecessary permissions.

Use a mobile security app

• Real-time protection:
  • Install a reputable antivirus app that offers real-time scanning and protection.
• Safe browsing features:
  • Utilize features that warn about dangerous websites and downloads.

Enable Find My Device

• Set up device tracking:
  • Go to Settings > Security > Find My Device.
  • Ensure Find My Device is toggled on.
• Locate or erase device remotely:
  • Visit android.com/find to locate, lock, or erase your device if it’s lost or stolen.

Practice safe browsing habits

• Secure connections:
  • Look for HTTPS in website URLs for secure connections.
• Avoid suspicious websites:
  • Do not visit sites that offer pirated content or seem untrustworthy.

Related: How to detect spyware on Android