How to Remove a Virus from Your Android Phone in 2026 (Step-by-Step Guide)

Is your Android phone suddenly slow, hot, or showing strange pop-up ads? You might be dealing with malware. The good news is that most Android viruses can be removed at home in under an hour — no technician required. This guide walks you through exactly how to remove a virus from your Android phone in 2026, from spotting the warning signs to cleaning the infection and keeping it from coming back.

Before you panic, it helps to know one thing: true "viruses" that replicate themselves are rare on Android. What most people call a phone virus is actually malware — malicious apps, adware, spyware, or browser hijackers that sneak in through dodgy downloads, fake apps, or malicious links. The removal process is the same either way, and it starts with confirming the problem.

Signs Your Android Phone Has a Virus or Malware

Malware rarely announces itself — but several of these symptoms together are a strong red flag.

• Battery draining much faster than usual. Malware often runs in the background, constantly using your processor and data connection.
• Phone overheating or lagging. If your phone gets hot while idle or apps take forever to open, a hidden process may be hogging resources.
• Pop-up ads everywhere. Full-screen ads on your home screen, lock screen, or inside apps you never installed ads in are a classic sign of adware.
• Apps you never installed. Unknown apps appearing on your phone, or apps crashing repeatedly, suggest something installed itself without your permission.
• Unexplained data usage or charges. Malware can send premium SMS messages or use mobile data in the background, showing up as a sudden spike in usage or an unexpected bill.
• Browser redirects. If your browser keeps sending you to strange websites or your homepage has changed, a browser hijacker may be at work.

If two or more of these sound familiar, it is time to clean your phone. Work through the steps below in order — most infections are gone by step three.

Step 1: Restart Your Phone in Safe Mode

Safe Mode starts Android with only essential system apps running, stopping third-party malware from hiding or resisting removal.

1. Press and hold the power button until the power menu appears.
2. Long-press Power off until a "Reboot to safe mode" prompt appears, then tap OK.
3. Your phone will restart with "Safe Mode" written in the bottom corner of the screen.

On Samsung phones, the steps are slightly different: press and hold the power and volume-down buttons, then tap and hold Power off when the menu appears. In Safe Mode, notice whether the symptoms disappear — if the pop-ups and lag stop, a third-party app is almost certainly the culprit.

Step 2: Find and Uninstall Suspicious Apps

While still in Safe Mode, go to Settings > Apps > See all apps and look for:

• Apps you do not remember installing
• Apps with generic names like "Cleaner", "Booster", "Free VPN", or "Battery Saver"
• Apps with no icon, a blank icon, or a recently installed date that matches when the problems began
• Apps with unusually large permission lists, especially access to SMS, contacts, or device admin rights

Tap the suspicious app, then tap Uninstall. If the button is greyed out, the app may have given itself device administrator rights — revoke them under Settings > Security > Device admin apps first, then uninstall it.

Also check your browser for suspicious extensions or changed settings, and remove any apps that appeared right before the symptoms started, even if they look innocent. Free "cleaner" and "booster" apps from outside the Play Store are among the most common sources of Android malware.

Step 3: Clear Your Browser Cache and Data

Browser hijackers often live in cached files. Clearing them removes the stored scripts that keep redirecting you.

1. Open Chrome (or your default browser) and tap the three-dot menu.
2. Go to Settings > Privacy and security > Delete browsing data.
3. Select Cached images and files and Cookies and site data, choose "All time", and tap Delete data.
4. Also check Settings > Site settings > Notifications and revoke permission from any website you do not recognise — malicious sites abuse notifications to push fake virus warnings.

Step 4: Run a Scan with a Reputable Mobile Security App

Now run a scan to catch anything you missed. Download a well-known mobile security app only from the Google Play Store — never from a pop-up ad or website claiming your phone is infected.

Trusted options in 2026 include Malwarebytes, Bitdefender Mobile Security, and Avast Mobile Security. Install one, run a full device scan, and follow its instructions to quarantine or delete anything it flags. One security app is enough; installing several can slow your phone down. Also make sure Google Play Protect is switched on under Settings > Security > Google Play Protect and run a manual scan there too.

Step 5: Update Android and Your Apps

Malware often exploits security holes in outdated software. Once your phone is clean, close those holes:

• Go to Settings > System > System update and install any available Android update.
• Open the Play Store, tap your profile icon, go to Manage apps & device, and update all apps.

If your phone no longer receives Android updates because it is several years old, be extra careful about what you install — and consider upgrading to a device that still gets security patches.

Step 6: Factory Reset as a Last Resort

If the malware survives every step above, a factory reset is the nuclear option. It wipes all data and returns your phone to its out-of-the-box state, removing virtually all malware.

1. Back up your important data first: photos, contacts, and documents to Google Drive or Google Photos. Do not back up apps — you might back up the malware too.
2. Go to Settings > System > Reset options > Erase all data (factory reset).
3. Confirm and wait for the phone to restart.
4. Set the phone up as new and reinstall apps one by one from the Play Store only.

Before resetting, note that persistent system-level infections are extremely rare on non-rooted phones. For the vast majority of users, a factory reset ends the infection completely.

How to Prevent Viruses on Your Android Phone

Removing malware is only half the job. These habits keep your phone clean:

• Install apps only from the Google Play Store. Avoid APK files from random websites, no matter how tempting the "free premium app" offer sounds. If you must sideload, verify the source carefully and turn the permission off again afterwards.
• Read app permissions. A torch app does not need access to your contacts or SMS. Deny permissions that do not match what the app does.
• Check reviews and download counts. Stick to apps with a large number of downloads and recent, genuine reviews. Be wary of new apps with a handful of five-star reviews.
• Keep Play Protect on. It scans apps before and after installation and warns you about harmful ones.
• Do not tap pop-up warnings. No website can scan your phone for viruses. Pop-ups claiming "Your phone is infected!" are scams designed to make you install the real malware.
• Use a strong screen lock and keep backups on. A PIN or fingerprint plus regular Google backups mean a factory reset is an inconvenience, not a disaster.

Frequently Asked Questions

Can Android phones get viruses?

Yes, although true self-replicating viruses are rare. Android phones are more commonly affected by malware such as adware, spyware, trojans, and browser hijackers, usually installed through malicious apps, fake downloads, or phishing links. The removal steps in this guide work for all of them.

Does a factory reset remove a virus from Android?

In almost all cases, yes. A factory reset erases all apps and data, including malware installed as a regular app. The only exceptions are rare system-level infections on rooted devices. Always back up your photos and contacts first, and reinstall apps only from the Play Store afterwards.

How do I know if the virus is really gone?

After removal, restart your phone normally and use it for a day. If the battery drain, overheating, pop-ups, and strange redirects are gone and no unknown apps reappear, the infection is cleared. Run one more scan with a reputable security app to confirm.

Are free antivirus apps for Android safe?

Some are, and some are the malware themselves. Only install security apps from well-known companies with strong reputations — such as Malwarebytes, Bitdefender, or Avast — and only from the Google Play Store. Avoid unknown "cleaner" or "antivirus" apps advertised through pop-ups.

Conclusion

Removing a virus from your Android phone is straightforward once you know the order: boot into Safe Mode, uninstall the suspicious app, clear your browser data, run a scan with a trusted security app, and update your software. A factory reset is there as a reliable last resort. If this helped you, bookmark it and share it with someone whose phone is acting strangely.