Pop-ups, unusual battery drain or an unfamiliar app can have several causes; none proves that your Android phone has a “virus.” If you suspect unsafe software, start with Google Play Protect and the apps you installed recently. Avoid tapping a pop-up that claims to clean your phone.
1. Check Google Play Protect
Open the Google Play Store, tap your profile picture, then open Play Protect. Make sure app scanning is on and run a scan. If Play Protect identifies a harmful app, follow its removal instructions. Google says Play Protect checks apps from both the Play Store and other sources, but a clean scan does not explain every performance or browser problem.
2. Update Android and your security patches
Open Settings → System → Software updates to check for Android updates. On many phones, Settings → Security & privacy → System & updates also shows the security and Google Play system update status. Menu names vary by manufacturer. Install available updates, restart, and check whether the symptom remains.
3. Remove apps you do not trust
In Settings → Apps, review apps installed just before the problem began, especially ones from outside the Play Store. Open an app’s details and choose Uninstall if you do not need or trust it. Do not remove a system component simply because its name is unfamiliar; check the app publisher or your phone manufacturer’s support first. Google’s malware-removal guidance recommends removing apps you do not trust or did not get from the Play Store.
4. Use Safe mode if an app keeps interfering
Safe mode temporarily disables downloaded apps. The method for entering it differs between phone models, so use your manufacturer’s instructions. If the problem disappears in Safe mode, restart normally and remove recently installed apps one at a time, checking after each removal. If the symptom persists in Safe mode, investigate updates, browser settings or a hardware problem instead of assuming an app is responsible.
5. Secure accounts if you see unauthorized activity
If messages were sent without your consent or an account shows unknown sign-ins, use a trusted device to visit Google Security Checkup. Review connected devices and recent security events, change a compromised password, and enable two-step verification. Removing an app from the phone alone does not undo account access an attacker may already have.
6. Reset only if the problem remains
A factory reset removes local data and installed apps. Before using it, back up photos and other important files, confirm that you know the Google Account and password on the phone, and follow your manufacturer’s reset instructions. Afterward, reinstall apps cautiously; restoring the same harmful app can bring the problem back. If you cannot identify the cause or the phone is managed by work or school, contact the manufacturer or your administrator before resetting it.
Sources and scope
- Google: Remove malware or unsafe software on Android — Play Protect, updates, untrusted apps and account checks.
- Google: Use Play Protect — what scanning can do and how to enable it.
- Google: Troubleshoot a crashing Android device — Safe mode and removing recent apps.
- Google: Factory reset an Android device — backup and account prerequisites.
These steps are based on Google’s guidance; menus and Safe mode controls vary by device and Android version. We have not diagnosed your phone remotely. Report a correction if an instruction differs on your model.
