How to Remove Virus From Android Without Factory Reset (2026 Guide)

Is your Android phone showing random ads, running extremely slow, draining battery at twice the normal rate, or behaving strangely? These are classic signs of a virus or malware infection. The terrifying thought of losing all your photos, contacts, and data by doing a factory reset stops most people from taking action.

The great news? In 90% of cases, you can completely remove viruses and malware from Android WITHOUT a factory reset — keeping all your precious data intact. In this comprehensive guide, I'll walk you through 12 proven methods to eliminate every type of Android malware.

⏱️ Time to remove virus: 10-30 minutes | Data loss: None (in most cases)

📋 Table of Contents

• Signs Your Android Has a Virus
• Types of Android Malware
• Step 1: Identify the Infected App
• Step 2: Boot Into Safe Mode
• Step 3: Uninstall Malicious Apps
• Step 4: Remove Device Administrator Access
• Step 5: Run Malwarebytes Scan
• Step 6: Clear Browser Data and Cache
• Step 7: Use Google Play Protect
• Step 8: Clear App Cache & Data
• Step 9: Reset App Preferences
• Step 10: Update Android System
• Step 11: Change All Passwords
• Step 12: Factory Reset (When Nothing Else Works)
• How to Prevent Viruses Forever
• FAQ Section

🚨 Signs Your Android Has a Virus

Before removing a virus, confirm your phone is actually infected:

Clear Warning Signs (Act Immediately):

Symptom	What It Indicates	Urgency
Random pop-up ads	Adware installed	🟡 Medium
Apps crash constantly	Malware interfering with system	🔴 High
Battery drains in 2-3 hours	Mining or spyware running	🔴 High
Unknown apps installed	Malware installing more malware	🔴 Very High
High data usage unexplained	Spyware sending your data	🔴 Very High
Phone hot when idle	Crypto mining malware	🔴 High
Ads on home screen	Adware with system access	🔴 High
Can't uninstall apps	Malware with admin rights	🚨 Critical
Browser redirects	Browser hijacker	🟡 Medium
Ransomware lock screen	Ransomware attack	🚨 Emergency

💡 Reality Check: Many "symptoms" people attribute to viruses are actually caused by buggy apps, outdated software, or low storage. However, if you have 3+ signs from the table above — especially unexpected data usage + battery drain + unknown apps — take action immediately.

🦠 Types of Android Malware

Understanding what type of malware you have helps you remove it faster:

1. Adware (Most Common):

Shows unwanted advertisements everywhere — on home screen, inside apps, in notifications

How you got it: Free games, "free" utility apps, apps from unofficial sources

Danger level: 🟡 Annoying but not immediately dangerous

2. Spyware (Very Dangerous):

Secretly collects your personal data — location, messages, passwords, contacts, photos

How you got it: Fake apps, phishing links, spy apps installed by someone with phone access

Danger level: 🔴 Very High — can steal banking credentials

3. Ransomware:

Locks your phone or encrypts files, demands payment to restore access

How you got it: Malicious email attachments, fake update alerts

Danger level: 🚨 Critical emergency

4. Trojan:

Disguises as legitimate app, then performs malicious actions in background

How you got it: Downloading apps from unofficial sources

Danger level: 🔴 High

5. Crypto Miner:

Uses your phone's processor to mine cryptocurrency for hackers

Signs: Phone extremely hot, battery drains rapidly, very slow

Danger level: 🔴 High — destroys battery health

6. Browser Hijacker:

Changes your browser homepage, redirects searches, shows fake search results

How you got it: Malicious browser extensions or apps

Danger level: 🟡 Medium

🔍 Step 1: Identify the Infected App

Success rate: Identifies problem in 80% of cases | Time: 5 minutes

Before removing anything, find what is causing the problem:

Check Battery Usage for Suspicious Apps:

1. Settings → Battery → Battery Usage
2. Look for apps using high percentage WITHOUT you using them
3. Any unknown app using 10%+ = very suspicious
4. Write down suspicious app names

Check Data Usage:

1. Settings → Connections → Data Usage
2. Check both WiFi and Mobile Data usage
3. Sort by most data used
4. Look for unknown apps sending data in background

Review Recently Installed Apps:

1. Open Google Play Store
2. Tap profile icon → Manage Apps & Device
3. Tap Manage tab
4. Sort by Recently Updated
5. Look for apps installed around time problems started

Check All Installed Apps:

1. Settings → Apps
2. Tap three dots → Show System Apps
3. Look for apps with:
   • Generic names ("System Service", "Phone Manager", "Clean Master")
   • No clear icon or default Android icon
   • Names you don't recognize at all
   • Very small size but claiming to do many things

💡 Quick Test: If problems started after installing a specific app → that app is almost certainly the culprit. Start removal process immediately!

🛡️ Step 2: Boot Into Safe Mode

Success rate: Tests if third-party app is the issue | Time: 2 minutes

Safe Mode loads Android without any third-party apps. If problems disappear in Safe Mode, a downloaded app is infected:

How to Enter Safe Mode:

Samsung Galaxy:

1. Press and hold Power button
2. When Power menu appears, tap and hold Power Off
3. Popup asks "Reboot to Safe Mode?" → Tap Safe Mode
4. Phone restarts with "Safe Mode" shown at bottom left

Other Android:

1. Turn phone off completely
2. Press Power button to turn on
3. When manufacturer logo appears, press and hold Volume Down
4. Keep holding until phone boots completely
5. "Safe Mode" text appears at bottom

What to Check in Safe Mode:

1. Wait 5 minutes after boot
2. Check if random ads appear → If NO: adware is in a downloaded app
3. Monitor battery drain → If SLOWER: malware is in downloaded app
4. Check if phone is hot → If COOLER: mining malware in downloaded app

Exit Safe Mode:

• Simply restart phone normally
• Or: Notification panel → "Safe Mode is on" → Tap to disable

✅ If problems disappear in Safe Mode: A third-party app is the culprit. Continue to Step 3 to find and remove it.

⚠️ If problems continue in Safe Mode: It might be a system app or hardware issue. Skip to Step 5 (full antivirus scan).

🗑️ Step 3: Uninstall Malicious Apps

Success rate: 70% for app-based malware | Time: 5 minutes

Once you have identified the infected app, remove it immediately:

Standard Uninstall:

1. Settings → Apps
2. Find suspicious app
3. Tap Uninstall
4. Confirm
5. Restart phone
6. Test if problem is resolved

If Uninstall is Greyed Out (Can't Uninstall):

The app has Device Administrator access. Follow these steps:

1. Settings → Biometrics and Security (or Security)
2. Tap Device Admin Apps
3. Find the suspicious app
4. Tap it → Tap Deactivate
5. Now go back to Apps → Uninstall

Uninstall Multiple Suspicious Apps:

If you found several suspicious apps, remove them in this order:

1. Start with apps installed MOST RECENTLY (closest to when problems started)
2. Remove one at a time
3. Restart after each removal
4. Test if problem improves
5. Continue until fully resolved

Apps to Remove Immediately:

Common Malicious App Types to Delete:

• ❌ "Free" gaming apps from unknown developers
• ❌ "Phone cleaner" or "Speed booster" apps from Play Store imposters
• ❌ Flashlight apps requesting camera, microphone, contacts
• ❌ QR code scanners requesting SMS access
• ❌ "Free VPN" apps (often data harvesting)
• ❌ Any APK downloaded from websites (not Play Store)
• ❌ Fake antivirus apps (common malware disguise)

🔓 Step 4: Remove Device Administrator Access

Time: 2 minutes | Critical step often overlooked

Sophisticated malware grants itself Device Administrator access, making it impossible to uninstall normally:

How to Remove Unauthorized Admin Access:

1. Settings → Biometrics and Security
2. Tap Device Admin Apps or Phone Administrators
3. Review list of apps with admin access
4. Only these should be here:
   • Google Pay
   • Find My Device
   • Exchange (if work email)
   • Your company MDM (if work phone)
5. For any OTHER app in this list:
   • Tap the app
   • Tap Deactivate
   • Now go to Apps → Uninstall it

🚨 Critical Warning: Unknown apps with Device Administrator access are extremely dangerous. They can:

• Prevent their own deletion
• Wipe your phone remotely
• Lock your screen (ransomware)
• Access all your data

Revoke admin access BEFORE trying to uninstall!

🔬 Step 5: Run Malwarebytes Scan

Success rate: 85% for all malware types | Time: 10-15 minutes

After manual removal, run a professional scan to catch anything you missed:

How to Use Malwarebytes (Free):

1. Open Google Play Store
2. Search Malwarebytes Security
3. Tap Install (official app by Malwarebytes Inc.)
4. Open app
5. Skip premium trial
6. Tap Run a Scan
7. Wait for scan to complete (5-10 minutes)
8. Review threats found
9. Tap Remove All
10. Restart phone

Other Trusted Antivirus Apps:

App Name	Developer	Free Scan?	Detection Rate
Malwarebytes	Malwarebytes Inc.	✅ Yes	⭐⭐⭐⭐⭐
Bitdefender	Bitdefender	✅ Yes	⭐⭐⭐⭐⭐
Kaspersky	Kaspersky Lab	✅ Yes	⭐⭐⭐⭐⭐
Avast Mobile	Avast	✅ Yes	⭐⭐⭐⭐

⚠️ Warning: Only download from the list above (official developers). Many "antivirus" apps on Play Store are actually malware themselves! If in doubt, use Malwarebytes — it is the industry standard for Android malware removal.

Run Multiple Scans:

Different antivirus apps detect different threats. For thorough cleaning:

1. Run Malwarebytes first
2. After restart, run Bitdefender second scan
3. Cross-verification removes 99%+ of all malware

🌐 Step 6: Clear Browser Data and Cache

Success rate: 90% for browser hijackers | Time: 3 minutes

Browser-based malware hides in your browser's data, cookies, and extensions:

Clear Chrome Browser Data:

1. Open Chrome
2. Tap three dots (⋮) → Settings
3. Tap Privacy and Security
4. Tap Clear browsing data
5. Select All time for time range
6. Check ALL boxes:
   • ✅ Browsing history
   • ✅ Cookies and site data
   • ✅ Cached images and files
7. Tap Advanced tab too:
   • ✅ Saved passwords (if you suspect they're compromised)
   • ✅ Site settings
8. Tap Clear data

Check Chrome Site Permissions:

1. Chrome → Settings → Site settings
2. Check Notifications → Remove any suspicious sites
3. Check Pop-ups and redirects → Make sure it is Blocked
4. Check Ads → Make sure Block ads is ON

Clear Samsung Internet (If You Use It):

1. Open Samsung Internet
2. Tap menu (three lines) → Settings
3. Tap Privacy and Security
4. Tap Delete browsing data
5. Select all → Delete data

Check Browser Extensions:

1. Chrome → three dots → Extensions
2. Remove any extensions you didn't install
3. Even well-known extension names can be fake clones

✅ Result: Clears browser-based malware, stops redirect attacks, removes notification spam permissions. Effective for 90% of browser-specific infections.

🛡️ Step 7: Use Google Play Protect

Success rate: 80% detection rate | Time: 5 minutes

Run Google Play Protect Scan:

1. Open Google Play Store
2. Tap profile icon (top right)
3. Tap Play Protect
4. Tap Scan
5. Wait for full device scan
6. Tap Remove for any threats found

Enable Enhanced Play Protect:

1. Play Protect → tap Settings gear
2. Enable Scan apps with Play Protect
3. Enable Improve harmful app detection

💡 Note: Play Protect is strong but not perfect. It misses newer threats sometimes. Always use in combination with Malwarebytes for best results.

🧹 Step 8: Clear App Cache and Data

Success rate: 60% for app-contained malware | Time: 5 minutes

Malware can hide in an app's cached data even after infection detection:

Clear Cache for Suspicious Apps:

1. Settings → Apps
2. Select suspicious app
3. Tap Storage
4. Tap Clear Cache
5. Also tap Clear Data (you will lose app settings)
6. Repeat for all suspicious apps

Clear These System Caches Too:

• Google Play Store: Apps → Play Store → Storage → Clear Cache
• Chrome: Apps → Chrome → Storage → Clear Cache
• Download Manager: Apps → (Show System) → Download Manager → Clear Cache

Samsung Device Care Clean:

1. Settings → Battery and Device Care → Storage
2. Tap Clean Now
3. Removes all app caches simultaneously

⚙️ Step 9: Reset App Preferences

Success rate: Fixes permission-based infections | Time: 2 minutes | Data loss: None

Malware often exploits hijacked default app settings:

How to Reset App Preferences:

1. Settings → Apps
2. Tap three dots (⋮)
3. Tap Reset App Preferences
4. Read what will reset
5. Tap Reset

What Gets Reset (No Data Lost):

• ✅ Default apps (browser, messaging, etc.) reset to system defaults
• ✅ Disabled apps re-enabled
• ✅ App permissions reset
• ✅ Background data restrictions cleared
• ❌ App data, logins, and files NOT affected

✅ Why This Helps: Some malware hijacks default app settings to redirect browser searches, intercept calls, or control notifications. Resetting removes these hijacked configurations without touching your data.

📲 Step 10: Update Android System

Success rate: Patches security vulnerabilities | Time: 20-60 minutes

Many malware infections exploit known security vulnerabilities in older Android versions:

Update Android:

Samsung:

1. Settings → Software Update
2. Tap Download and Install
3. Install latest update available

Other Android:

1. Settings → System → System Update
2. Check for updates
3. Download and install

Also Update These Apps:

• Google Play Services (most critical)
• Android System WebView
• Google Play Store
• Chrome browser

💡 Why This Matters: Android security patches are released monthly. Unpatched phones have known vulnerabilities that malware exploits. Keeping updated closes these doors permanently.

🔑 Step 11: Change All Passwords

Critical if you had spyware | Time: 15-30 minutes

If your phone had spyware or banking malware, your passwords may be compromised:

Priority Order for Password Changes:

1. 🔴 Banking apps (most critical — change IMMEDIATELY)
2. 🔴 Google Account (controls everything on Android)
3. 🔴 Email accounts (password reset method for other accounts)
4. 🟡 Social media (Facebook, Instagram, Twitter)
5. 🟡 PayPal, Amazon (payment platforms)
6. 🟢 Other apps (streaming, gaming, etc.)

How to Change Google Password:

1. Go to myaccount.google.com
2. Click Security
3. Under "How you sign in to Google" → click Password
4. Enter new strong password
5. Enable 2-Step Verification immediately after

Check for Unauthorized Transactions:

1. Review bank statements for last 30-60 days
2. Check Google Pay transaction history
3. Review app store purchase history
4. Check credit card statements
5. If unauthorized transactions found → Contact bank IMMEDIATELY

⚠️ Bank Alert: If you had banking malware (you noticed login credentials being entered automatically, or suspicious transactions), call your bank immediately. They can freeze your account while you secure your device.

🔄 Step 12: Factory Reset (When Nothing Else Works)

Success rate: 99.9% | Time: 1-2 hours | Data loss: Everything

If all steps above failed, factory reset is your final option:

⚠️ Use Factory Reset When:

• Antivirus can't remove the malware
• Phone is locked by ransomware
• Malware keeps reinstalling itself
• Phone is completely unusable
• You found serious spyware accessing banking/personal data

MUST Do Before Factory Reset:

1. ✅ Backup photos (Google Photos)
2. ✅ Backup WhatsApp (Settings → Chats → Chat backup)
3. ✅ Sync contacts to Google
4. ✅ Note down app logins
5. ✅ Back up Google Authenticator codes

How to Factory Reset:

1. Settings → General Management → Reset
2. Tap Factory Data Reset
3. Tap Reset
4. Enter PIN
5. Tap Delete All
6. Wait 10-20 minutes

Critical After Factory Reset:

1. Change ALL passwords BEFORE restoring apps
2. Only reinstall apps from official Play Store
3. Enable Google Play Protect
4. Install Malwarebytes
5. Set up 2FA on Google account
6. Be careful what you restore — don't restore from backup if backup itself is from infected period

🛡️ How to Prevent Viruses Forever

The best virus removal is never getting one in the first place:

The 10 Golden Rules of Android Security:

1. ✅ ONLY install apps from Google Play Store (never APK from websites)
2. ✅ Check developer name before installing (real developer vs impostor)
3. ✅ Read app reviews — users report suspicious behavior
4. ✅ Check permissions before installing — does it make sense?
5. ✅ Keep Android updated — monthly security patches are critical
6. ✅ Enable Google Play Protect always
7. ✅ Never click links in suspicious SMS
8. ✅ Use trusted WiFi only — avoid public WiFi for banking
9. ✅ Enable 2FA on Google account
10. ✅ Run monthly Malwarebytes scan as preventive maintenance

Red Flags When Installing Apps:

Red Flag	What It Means	Action
Unknown developer	May be imposter or fake	Research developer online
Few reviews (under 100)	New/untested app	Wait for more reviews
Requests many permissions	Data harvesting likely	Deny or don't install
Promises too good results	Likely fake/malware	Avoid completely
Very large app for simple function	Bloated with malware code	Find lighter alternative

Monthly Security Routine:

• 📅 Run Malwarebytes scan
• 📅 Check Privacy Dashboard for suspicious accesses
• 📅 Review installed apps (remove unused)
• 📅 Check data usage for anomalies
• 📅 Update all apps and Android

❓ Frequently Asked Questions (FAQ)

Q1: Can Android phones actually get viruses?

A: Yes! Android malware is extremely common. Over 3 million malicious apps have been identified. Most infections come from outside the Play Store (APK files from websites), but malware occasionally slips through Play Store too. The key difference from PC viruses: Android malware is usually contained within apps rather than spreading between apps automatically.

Q2: My phone has random ads popping up everywhere. What is it?

A: This is almost certainly adware — a type of malware that shows advertisements to generate revenue for the creator. It is usually caused by a free game or utility app you downloaded. Boot into Safe Mode first to confirm it disappears. Then review recently installed apps and remove suspects one by one.

Q3: Can a virus steal my banking information?

A: Yes. Banking trojans are real Android threats. They:

• Overlay fake login screens on top of real banking apps
• Record keystrokes to capture passwords
• Intercept SMS (to steal OTP codes)
• Grant attackers full remote access

If you suspect banking malware, call your bank IMMEDIATELY and change all passwords from a different, clean device.

Q4: My phone has a virus but I can't factory reset because I'll lose everything. What do I do?

A: Try steps 1-11 first. 90% of malware can be removed without factory reset. If you must reset, backup using:

• Google Photos (photos automatically)
• Google Drive (files)
• WhatsApp backup to Google Drive
• Google account sync (contacts, calendar)

These are free and preserve your most important data before resetting.

Q5: Is Google Play Store completely safe?

A: No, but it is far safer than downloading APK files. Google Play Protect scans apps, but malware occasionally passes through. Red flags in Play Store: very new apps, few reviews, unknown developers, excessive permissions. Always check developer name, reviews, and permissions before installing.

Q6: My phone shows "Your phone has a virus" message. Is it real?

A: 99% of the time, NO. These are fake virus warnings (scareware) shown in web browsers, trying to scare you into downloading a fake antivirus app (which is actually malware). Real virus warnings come from Play Protect or your installed antivirus app — NOT from websites.

What to do: Close the browser tab, clear Chrome data, run actual Malwarebytes scan.

Q7: Can malware survive factory reset?

A: Extremely rare consumer malware can survive factory reset by hiding in the phone's firmware. This is called "pre-installed malware" and typically only appears on very cheap, no-name Android phones from unreliable manufacturers. For reputable brands (Samsung, Xiaomi, OnePlus, Pixel), factory reset eliminates 100% of malware.

Q8: Do I need antivirus running all the time?

A: Opinions vary. Minimal approach: Google Play Protect (always on) + Malwarebytes scan monthly. Full protection approach: Real-time antivirus like Bitdefender or Kaspersky. On-demand scanning (Malwarebytes free) is sufficient for most users who only install apps from Play Store and avoid suspicious links.

Q9: How do I know the virus is completely removed?

A: Confirmed removal indicators:

• ✅ Malwarebytes scan shows "No threats found"
• ✅ Battery drain returns to normal levels
• ✅ Phone no longer overheats when idle
• ✅ No more random pop-up ads
• ✅ Data usage returns to normal
• ✅ Phone performance back to normal
• ✅ All suspicious apps removed from App list

Q10: Can I get a virus from visiting a website?

A: "Drive-by downloads" (automatic malware from websites) are very rare on modern Android with Chrome. However:

• Malicious websites can show fake virus warnings (scareware)
• Phishing sites can steal login credentials
• Some sites auto-download malicious APK files
• Malvertising (malicious ads on legit sites) can be dangerous

Always use Chrome with Enhanced Safe Browsing enabled!

📋 Complete Virus Removal Checklist

✅ Follow These Steps in Order:

Identification (5 minutes):

• ☐ Check battery usage for suspicious apps
• ☐ Check data usage for unknown apps
• ☐ Review recently installed apps
• ☐ Boot into Safe Mode to confirm

Removal (15-20 minutes):

• ☐ Revoke Device Administrator access from unknown apps
• ☐ Uninstall suspicious apps
• ☐ Run Malwarebytes scan and remove threats
• ☐ Clear browser data and reset permissions
• ☐ Run Google Play Protect scan
• ☐ Clear app cache for suspicious apps
• ☐ Reset app preferences

Recovery (15-30 minutes):

• ☐ Update Android to latest version
• ☐ Change Google account password
• ☐ Change banking app passwords
• ☐ Enable 2FA on all accounts
• ☐ Run final Malwarebytes scan to confirm clean

📊 Step-by-Step Success Rate

Step	Success Rate	Data Loss	Time
Uninstall infected app	70%	None	5 min
Malwarebytes Scan	85%	None	10-15 min
Clear browser data	90% (browser)	Browsing history	3 min
Remove admin access + uninstall	80%	None	5 min
All steps combined	90%	Minimal	30 min
Factory Reset	99.9%	Everything	1-2 hours

🎯 Final Thoughts

Getting a virus on your Android phone is scary, but it is almost always fixable without losing your data. The key is acting quickly, methodically, and not panicking. Follow these 12 steps in order, and you will eliminate 90% of malware without factory reset.

✅ Key Takeaways:

• 🔍 First: Identify the infected app using battery/data usage analysis
• 🛡️ Test: Boot into Safe Mode to confirm app is the culprit
• 🗑️ Remove: Revoke admin access first, then uninstall
• 🔬 Scan: Run Malwarebytes for thorough cleaning
• 🔑 Secure: Change passwords and enable 2FA after removal
• 🏭 Last resort: Factory reset if everything else fails

💡 Prevention is Better Than Cure:

Install only from Play Store. Check developer and permissions. Keep Android updated. Run monthly scans. Enable Play Protect. These five habits make phone infection virtually impossible!

Did these steps remove your virus? Let us know which step worked in comments!

Still infected? Describe your symptoms below and we will help diagnose and remove it!

Last updated: 2026 | Works on Samsung Galaxy, Xiaomi, OnePlus, Google Pixel, Realme, Oppo, Vivo, Motorola and all Android phones running Android 8.0 and above

📚 More Security and Privacy Guides:

• Is Your Android Phone Being Tracked? Here is How to Check
• 10 Privacy Settings You Must Turn On in Android Right Now
• How to Backup Android Phone Completely (2026 Guide)
• Phone Stuck on Logo? Here is the Real Fix (No Data Loss)
• How to Fix App Keeps Stopping Error on Android