How to cure Android from viruses. How to remove a virus from an Android phone: A few simple steps

This is another part of posts about virus activity on Android and how I dealt with viruses. The first four are here:

Attention! The materials listed above and this post tell about my experience and cannot serve as instructions for use.

Part five. The virus got into the device firmware

One of the smartphones that I use to test applications has stopped working. It didn't break, but it became completely impossible to use.

So what turned out to be. The phone has become infected. If the day before everything was fine with the smartphone, then a day later several applications were discovered: applications for monitoring battery charge, 3 applications with very frivolous icons, several applications that were disguised as system ones. Apparently, I got caught somewhere and clicked on something that shouldn’t have been clicked. I will also say that this virus on Android is not deleted when resetting, but more on that later.

The infection turned out to be really massive. Not only did the paid version of Dr.Web Security Space miss this entire zoo, but these virus bastards captured all the resources. It is likely that Dr.Web stopped something, but it was unable to neutralize a number of viruses.

What did I do to remove viruses?

An attempt to block/stop pest applications or remove them from startup was unsuccessful. Some third-party applications managed to be blocked after a reboot, but the one that got deep into the system simply restarted the system and all the viruses. A minute after loading the smartphone, the response to key presses began to take 1-2 minutes.
Downloaded Kaspersky antivirus Internet Security for Android in the form of an .apk file, installed it and I even managed to launch it. A quick scan showed nothing, a full scan froze at 11%. It took 3 reboots of the smartphone for KIS to scan the entire device. Nothing was found!
Getting root seemed very difficult to me on such a device, on which applications and windows are constantly closed and rebooted. Even in safe mode it is absolutely impossible to work.
The only option that seemed to me to be a quick way out of the predicament did not work. A factory reset gave me a clean Android with... pre-installed viruses. This virus has installed itself in the very insides!

The phone is practically dead! So what do you think? Would you like this to happen to your smartphone? Please note that I had a ban on launching applications not from Google Play, paid antivirus and I did not climb any dubious sites, and installed applications only from the Google store. How did what happened? Don't know. However, it did me good.

Conclusions I made:

Antivirus is not a guarantee against infection! The new virus algorithm is not detected by any antivirus that works with signatures and may not be noticed by heuristic analysis.
Always back up your critical data; you never know when you'll need it.
Use a separate device for experiments. Everyone has old smartphones and tablets.
Root access in skillful hands can provide invaluable assistance in preventing infection and in cleaning the device from malware that can enter the system area.

If the first half of the day was filled with attempts to fully restore the functionality of the smartphone, then the second half was spent trying to somehow turn it on.

Part six. Changing the firmware as a means of fighting viruses on Android

In fact, I just wanted to restore the functionality of the device and, if possible, improve security. I downloaded the latest firmware from the website, launched the Smart Phone Flash Tool and flashed the smartphone.

How I reflashed ZOPO ZP-780. Just a song for 3 hours! The second time this is done in about 15 minutes.

Downloaded. Launched Smart Phone Flash Tool.
I downloaded and unpacked the archive with the firmware from the official website. Specified the path to the file MT6582_Android_scatter.txt
Switched the Firmware Upgrade mode. Clicked the Download button. It is important to press first and then connect the phone! When formatting (Format tab), the same rule applies.
Connected with a USB cable turned off smartphone. If it didn’t work, then rebooted the smartphone (turned it off, removed/inserted the battery, connected it to the computer).
The download of updates began. After downloading the update, the “OK” button appeared, which means that the files were copied to the device.

When I turned on the smartphone, I realized that I was overjoyed early - the most terrible phantom clicks appeared in the dialer mode. The “back”, “home”, and “menu” sensors stopped working in a number of applications.

The ZP-780 was reflashed not entirely successfully - the IMEI number was lost. Yes, this happens, although not often. It always crashes when formatting. For such cases they do everything normal people backup But the smartphone is a test one, so it’s okay, and the IMEI is restored.

How to check your IMEI?

Type from keyboard *#06# . The IMEI code of your device will be displayed in response. My code was not displayed, but instead a message appeared invalid IMEI.

What's wrong with not having an IMEI code?

You can forget that your smartphone can make calls - you won’t be able to call anyone, use mobile internet Same.

Where can I get the IMEI code or how can I find it?

The IMEI code is printed on a sticker on the box.
The smartphone has an IMEI code under the battery.
You can view the code in your Google account.

To find out IMEI using personal account Google, you need to log into your account and go to . In the list of devices linked to your account, the first line will be the IMEI code.

In this article we will look at how to remove a virus on an Android phone/tablet using your laptop or computer. Useful in cases where it is not possible to detect a virus using the application or the virus itself blocks access to the phone.

Written for Android large number viruses, so users who actively use the Internet on a phone or tablet can accidentally infect the device. You can clean your device from malicious software using a computer or mobile antivirus.

How to remove a virus from your phone via computer

If, when connected, the internal memory of a smartphone or tablet and microSD card are detected as regular removable media, then they can be scanned using an antivirus on your computer. Before performing this procedure, make sure that USB debugging is enabled.

If there is no “For Developers” section in the settings, first go to the “About phone” submenu and click on the “About phone” item 5-7 times. A message will appear on the screen telling you how many times you need to tap on the item to become a developer.

After enabling debugging, connect your device to your computer. Its media will be detected as removable disks. To check them for malware, run an antivirus on your computer. Under PC Scan, select Removable Storage Scan or Custom Scan.

Files that the antivirus detects as malicious must be deleted from the phone. Together with the built-in antivirus, you can use the free cleaning utility Dr.Web CureIt!

It also has a function for checking removable drives, which allows you to quickly deal with harmful files if they are stored on a memory card or internal storage of a mobile device.

Removing a virus from your phone using the built-in

Unfortunately, most modern devices, when connected to a computer, are identified as a media player or camera, depending on the selected mode - MTP or PTP. Accordingly, the option of checking removable drives on the computer is eliminated. The only possibility is if the virus is saved as an application on the memory card. It can be removed from the phone and read through a card reader.

In addition, not all antiviruses for computers running Windows detect viruses for Android. Therefore, it is better to use specialized software, that is, antivirus software for your phone/tablet. All major antivirus developers have such applications: Kaspersky Lab, ESET, Avast, Dr.Web.

If the phone responds to your requests, install from Play Market one of the proven antiviruses for Android and scan your mobile device. Delete infected data. Also, get rid of the latter installed applications, which could become a source of infection. Pay especially close attention to programs that were downloaded from an unknown source and not from the Play Market.

Working in Safe Mode

If the mobile antivirus does not work in normal mode, try cleaning your phone in Safe Mode. Most viruses do not work in it, so you can easily remove them if you can find them. To enter safe mode:

Run your mobile antivirus in safe mode and check your system again. This method helps to get rid of advertising applications that display banners on your desktop. To return to normal Android mode, simply restart your device.

Resetting your phone to remove a virus

If cleaning your phone/tablet with an antivirus did not help, or the device has a ransomware virus that has blocked the device, then you will have to reset the settings to remove it. As a result of this operation, all data will be deleted from the mobile device.

If synchronization with Google is enabled, then nothing bad will happen - then restore the lost information from the backup. To save photos, music, videos, connect the device to your PC and copy the necessary files to hard drive. Don’t forget to check them on your PC with an antivirus in case they are also infected.

After a little preparation, turn off your phone and launch Recovery Mode on it. Typically, this requires holding down the Volume Up key and the Power button when turning it on, but there may be other combinations, so find out the exact combination for your phone model.

Virus programs have been attacking user devices since the beginning of development computer technology. From Windows, virus creators switched their attention to other systems, including Android. Numerous viruses from relatively harmless and spam to hijackers cash from phone accounts, cards and wallets are written every day, and today they take such forms that at first glance it is impossible to even distinguish the interface malware from your own account. With the widespread introduction of SMS banking, it is not surprising that user passwords for personal accounts have become a frequent target of “invaders”.

Finding and eliminating viruses on an Android tablet.

Regardless of whether viruses are aimed at stealing funds or are simply pests of the system, their removal is sometimes not an easy task. are not always able to save you from a virus attack, even if a virus has been detected, not every security software can eliminate or deactivate it. In addition, regular database updates are required, because virus developers are not asleep, using new methods of bypassing protections and authentication, intercepting passwords, disabling antivirus, etc. All systems, in fact, are vulnerable to one degree or another, and viruses help It is often the user himself who takes up residence on the device.

The attackers are coming different ways, in order to force the user to download virus software on their own, attracting with “free cheese” or fueling interest in other ways, so the most common infection is as a result of the actions of the device owner. Common reasons infections are:

Lack of installed anti-virus software, old update databases;
"Surfing" on sites. Exploring the depths of the Internet for different purposes, it is quite possible to catch an “infection”, while it is not at all necessary to visit resources with “18+” content; there are enough viruses on portals with completely harmless topics;
Downloading software from dubious sites;
Launching unknown programs from unofficial resources;
Data exchange via open channels (Bluetooth, public Wi-fi).

Virus programs do not necessarily have the extension “.apk” and are registered in the downloads folder, where they are easy to find and neutralize. There are many modifications of viruses, the most insidious of them can be hidden under the guise of system processes and files, as well as useful applications and finding a well-camouflaged pest is difficult.

By the way, in most cases installed antivirus nevertheless, it warns the user about a possible danger, but not everyone can cope with the desire to download something if they already have it in mind and leave the page. In addition, security software often mistakes hacked applications for malware, so many people ignore the defender’s scolding and download the files anyway. Well, who wouldn’t want to get cracked programs for free with features that are only available in paid versions of the software? Many users sin by downloading unofficial applications and interesting “goodies”, risking bringing trouble to the device system, which is successfully exploited by attackers.

Symptoms of a virus infection on an Android device

Virus programs manifest themselves in different ways, depending on their purpose, and if you observe one or more signs of their activity on your tablet or smartphone, you need to urgently take steps to get rid of the “infection.” The following phenomena can indicate the presence of malware on an Android device:

System performance deterioration. The device slows down, the response time to commands, including when launching applications, has increased significantly, lack of response to some actions;
Browser slowness, low speed downloading files;
Spontaneous deletion of files from the device’s memory or their moving or editing. If it is noticed that photos, videos or other elements disappear, are found not where they were before, that is, actions are performed without the participation of the user, it means that the device has acquired excessive independence precisely thanks to viruses;
The appearance of unknown applications;
Spontaneously making calls, sending messages;
Withdrawing money from a mobile account for no apparent reason;
Loss of funds from a bank account or wallets;
Requests for access to the camera, memory or Internet connection, administrator rights, etc.;
Blocking the launch of the OS of a tablet or other Android device, regular crashes, shutdowns and other system “glitches”;
Blocking access to user data, individual elements or system settings;
The appearance of pop-up windows, banners with advertising;
Increased battery consumption.

If there is even the slightest suspicion of the presence of virus programs, or even if the device “lives its own life,” you must immediately check it for viruses. Next, let's look at how this can be done.

Scan your device for viruses

Versions of Android higher than version 4 have a built-in scanner, which in some cases allows you to detect virus threats, so if a standard tool is available, it won’t hurt to run it first. Other testing options are more effective and, if the case is severe, you can try each of them.

Using third-party antiviruses

The Play Market has many paid and free applications, with which you can check your Android device for viruses and also get rid of them. To do this, you need to install the program, reboot the device and start scanning the system. In addition to downloading the software from the official store, you can also do this by running the installation in manual mode using a file manager or transfer the antivirus from desktop computer. Dr.Web and ESET Mobile Security & Antivirus services have proven themselves to be excellent.

How to check Android for viruses via computer

Convenient and in an efficient way A way to identify threats is to check the tablet for viruses through a computer. Since the antivirus is also capable of working with devices and storage devices connected to a PC, it also scans Android directly from the computer without installing it directly on the device. To do this you will need to take the following steps:

Connect your Android device to a desktop PC or laptop using a USB cable;
In the tablet settings, activate the “Use as a multimedia device” item;
In the PC menu (“My Computer”), find the connected device and double-click to open the data;
Launch the antivirus on the PC, designate the additional device as the object of scanning;
After checking the tablet for viruses, the defender will provide information with the results;
Next, you should try to disinfect the files or delete them.

Security software on your computer must have the latest anti-virus databases in order to most effectively neutralize even new modifications of viruses.

How to find out if there are viruses in the system using online services

The easiest way to quickly find out whether there is malware on Android is to check the device using online services designed for this purpose. They allow you to scan your device in real time. To do this, you need to select files and start the scanning procedure with the corresponding start button. After some time has passed, the scanner will display the results. Good online antiviruses include ESET Online Scanner, Kaspersky Online Scanner, VirSCAN. Some services assume automatic removal or quarantining of the virus, while others only detect it, and then you will have to remove it manually.

How to avoid problems and save the system

Antivirus services are not always able to cope with a pest that has settled on Android. In cases where you cannot get rid of the problem after scanning your device, you can eliminate the threat yourself.

Removing viruses using root rights

How to clean your tablet from viruses in safe mode

If you cannot get rid of the virus program as usual, you can try doing it in safe mode, since in this case only basic system functions will be launched without third-party applications. Typically, safe mode is activated by the power button, which is held until the corresponding message appears, suggesting that the device goes into this state, after which you need to confirm the action. In safe mode, you need to scan the system with an antivirus or delete infected files yourself if you have root rights and already know the location of the source of the problems. To return to normal state, the device must be rebooted.

How to remove a virus from a tablet via PC

It is possible to remove a virus from Android via a computer using a PC antivirus program or using a file manager for Android devices. If after diagnostics by the defender it was not possible to cure or eliminate the virus software, you can use Android Commander. By running it on your computer, you can access the device’s information and perform various operations with them (move, copy, delete, etc.), for maximum access you will need to obtain root rights and activate USB debugging (“Settings” - “System” - “Developer options”). Next you need to do the following:

Connect the device to the PC like a USB drive;
With root rights, open the Android Commander manager, in the right part of the window the system elements of the connected device will also be displayed;
Find the virus executable file and eliminate it. Copying it to a PC and scanning each folder separately with an antivirus can help with this.

Extreme measures

If the tried methods did not work, there are guaranteed, but extreme ways to get rid of virus software on a tablet or other Android device:

Return to factory settings. You can get to the option using the system menu; if access to the system is not blocked by a virus, it is located in the personal settings in the backup section;
Hard-reset via Recovery mode will help when access to system functions is blocked. This mode is entered differently depending on the device model (holding the volume key or a special button). In the Recovery menu, select the option “wipe data/factory reset” or “factory reset”;
Reflashing the device. The method involves reinstalling the Android system, similar to Windows, to implement it.

All these methods allow the device to return to its original state, as when it was purchased, and all user data will be deleted along with the viruses. Before any of the procedures, it is better to copy important data to another medium.

How to protect your system from malware

Install anti-virus software on your device;
Periodically run a system scan for viruses;
Update the system as official updates are released;
exclusively from trusted resources, while still checking it for infection;
Do not download unofficial firmware and “cracked” applications;
Do not connect your device to other suspicious devices, either via Bluetooth or directly.

The main advantage of an Android tablet or phone is free access to the Internet, the ability to install any applications, and use the wide multimedia functionality of the device. All larger number Users are faced with such an unpleasant problem as virus infection of the system. You will learn how to remove a virus from an Android tablet, having previously understood their types and the most common sources.

Possible reasons for a virus appearing on a device

The best way to get rid of a virus is to prevent it from appearing at all, and for this you need to know the reasons for its occurrence. There are a large number of ways for code to get into the Android OS; the most common ones should be highlighted:

Downloading various files from the Internet, following unsafe links;
Penetration of viruses through SMS/MMS messages;
Downloading and installing applications from unofficial sources;
Installation of a little-known software from Google Play (low probability);
Using a Bluetooth connection to exchange data.

How serious the consequences of a system being infected with a virus will be depends on which category it belongs to. In most cases, the user is able to remove the virus from the phone on his own, but there are other situations when more serious measures have to be taken. To prevent a virus from entering through an application installation, special attention pay attention to its description. This is especially true for the access that the application requests to various data. Requests such as access to personal messages, sending a call, contacts and other user information should at least raise suspicion. Once you agree to grant access, there is no going back.

Installing an Anti-Virus program

If you suspect the presence of a virus on your device or just want to check the system for prevention, then the first step is to install an antivirus. It is worth saying that you can install this program yourself either on a tablet or on a computer, although you should already have it on your PC.

Have you decided to install an antivirus on Android? It’s enough to choose a couple of the most popular ones on Google Play. Why do you need multiple applications? They work based on various algorithms for searching and eliminating threats. Sometimes one antivirus claims that the system is absolutely clean and safe, while another detects all kinds of viruses hidden in the most unexpected corners of the OS.

To remove a virus through your computer without installing an antivirus, connect your device to your computer and then scan it using the available program. To do this, just go to “My Computer”, find a connected device among the disks, right-click on it, select the “scan with ...” function, where instead of an ellipsis there should be the name of the antivirus.

If he was able to detect malicious or unwanted programs, he must begin eliminating them. The antivirus can remove most of them on its own. You can try to get rid of them manually by finding the location of the viruses and removing them.

It happens that a threat hides so well under the guise of a completely harmless file that the antivirus does not see it. In this case, we can recommend resetting the device to factory settings. You should first copy all personal data, such as music, photos, videos and others, since they will all be deleted. This function is located in the device settings.

There is another way to effectively remove viruses - flashing the gadget, but in this case you cannot do without root rights if you intend to carry out this procedure yourself. You must first use the Recovery function, which resets various settings and settings to their original values.

Determining what kind of virus

The variety of viruses is now enormous. No matter how hard antivirus program developers try to create new algorithms and quickly eliminate viruses, scammers are just as quickly coming up with new ways to penetrate the system and gain access to user data.

One of the most common types is an SMS threat, which, however, will not cause any harm to the tablet if it does not have a SIM card installed. However, it is best to immediately get rid of the spyware virus by uninstalling the application after installing it to sneak into the system. If it cannot be deleted, then you are dealing with a more complex program. You can cope with the problem using, for example, AVAST.

There is another unpleasant type of virus that blocks the screen. It looks like this: the entire screen area is occupied by a window with a blocking banner. It cannot be removed, rolled up, etc. How to proceed:

It is recommended to act as quickly as possible. First of all, reboot your device.
Remove the application that introduced the adware into the system, or scan the OS with an antivirus, which will eliminate the threat itself.
If your device does not have an antivirus, connect it to your PC and follow the steps described above.
If none of these methods help, perform the Hard Reset procedure, first trying to save your personal information, since after the reset it will be completely deleted from the tablet.

The MIA virus is gaining popularity, which long time caused damage only to computer operating systems. As a result of the appearance of such malware, a message appears on the gadget’s display stating that the device is subject to blocking. Moreover, in order to remove the lock, the user needs to enter a certain sum of money. In most cases, such threats penetrate the system due to visiting pornographic sites.

First try closing the program in which the blocker appeared.
If that doesn't work, reboot your device and turn it on in safe mode. To do this, hold down the volume buttons at the same time as soon as the manufacturer's logo appears on the screen.
When the tablet turns on, remove the virus in the settings or using a special application.
If the virus is not removed, disable administrator rights for this application in the “Security” section.
If no actions give the required result, perform the Hard Reset procedure

The Chinese virus, or rather its various forms, has become especially widespread. For example, about half a million people in China suffered from a malicious program hidden in the animated desktop wallpaper of an Android device. It is extremely difficult to detect such software, and even more difficult to get rid of it. The Trojan spends the user’s funds in every possible way, sending paid messages, and also reads important personal information from the tablet.

How to secure your tablet or smartphone

Follow these tips to reduce the risk of a threat getting into the Android OS:

Install an antivirus if you often use the browser and visit various sites;
Install content only from trusted sources;
Please note that root rights increase the risk of malware infection;
Carefully read the application descriptions, especially its requests for access to various functions, rights, etc.;
Never click on links contained in messages from unknown sources.

Conclusion

The appearance of viruses on a tablet is, of course, an unpleasant phenomenon that spoils the impression of working with the device, or even completely blocks all of its functionality. By following the above tips, you can remove the virus from your Android tablet or smartphone yourself and protect yourself from such situations. If a system virus has already penetrated the OS, the main thing is not to panic, but to consistently follow all steps to eliminate it.

The Android operating system is susceptible to viral infections - this fact no longer causes any surprise among users. After all, smartphones are full-fledged computers, albeit pocket-sized ones. But another question arises - how to remove a virus from a phone? For this purpose, many tools have been created to combat any viral infections. Let's look at these tools and find the best option.

Signs of a viral infection

How to remove a virus from an Android phone? It is logical that antivirus programs are used for this. But what are the signs of a viral infection?

The Android smartphone constantly reboots - if cleaning debris does not help, then the problem with reboots may be related to viruses;
Money disappears from the account - many viruses for Android use hidden sending of paid SMS and calls to premium numbers;
Your data bank card got into open access– this often happens when Android devices are infected with viruses;
Applications are teeming with advertising banners (several times more than usual) - this can also be the result of viruses;
Some functions are blocked - this is another visible result of infection;
Increased battery consumption - the virus loads the processor, draining the battery;
Decreased performance is another symptom of an overloaded processor.

The most disgusting thing is that many viruses do not manifest themselves in any way, spying on users and transferring confidential data to third parties.

We use antivirus programs

In order to remove a virus from an Android phone, you need to use some kind of antivirus. The clear leader in the Play Market app store is antivirus program Dr. Web Light. It is absolutely free and has an excellent instinct for viral infections. By the way, you can remove a Trojan from your phone using the same antivirus - it copes with this task perfectly.

The undoubted advantage of the Dr. Web Light is the ability to remove virus bodies that are not in the database - the search is based on signs of viral infection using a special technology created by the developer. The disadvantage of the program is that the application lacks comprehensive protection. But it is available in the paid version of the antivirus.

Dr. app Web Light can find and neutralize known viruses, focusing on databases with signatures (regularly updated). It has a built-in file system scanner and a function to protect the contents of memory cards. At the same time, it does not load the processor and uses battery power wisely.

Dr. Web Light will help remove viruses and Trojans from your phone, and will also unlock the device. The leader in user ratings is the CM Security application, which contains comprehensive protection tools and a built-in anti-virus scanner. It can scan the file system, monitor visited sites, and protect system and user applications.

If you suspect that your phone is full of viruses, install CM Security and conduct a comprehensive scan of your device. In order to remove a Trojan from an Android phone or deal with any other viral infection, you can use the following programs:

AVG Antivirus is a good application with decent free basic functionality;
Mobile Security & Antivirus – an excellent antivirus from Avast (many modules are paid);
Kaspersky Internet Security is a popular application from a well-known developer;
Avira Antivirus is not the most famous, but a good antivirus;
360 Security Lite is a lightweight version of the well-known antivirus complex.

There are also many other antiviruses in the Play Market that allow you to remove viruses from your phone. But they are not particularly popular, since products from well-known developers are more effective.

Other ways to remove viruses

In order to remove a virus from a phone, you can use a rather unusual technique - we save all the important data from the phone on a memory card, remove it and send it for anti-virus scanning with a computer (to get rid of virus bodies that could remain on the card).

In the meantime, we do a general reset, which will remove all viruses that have infected operating system . This technique is also recommended if the consequence of a virus infection is the complete inoperability of your device.

To avoid losing important data due to a virus infection, regularly back up your device.

It is also possible to remove a virus from your phone via a computer. To do this, you need to connect the device to the computer and run an anti-virus scan, specifying the connected smartphone as the target. But you need to remember that this approach is not possible on all Android devices. Among free antiviruses For computers, we recommend Avast and Kaspersky Antivirus Free.