Troubleshooting suspected malware on your Android device

You may notice your Android device slowing down, overheating, or behaving strangely. These symptoms may indicate the presence of malware or a virus, malicious software that can compromise your device’s performance and security. In rare cases, it may mean that the device has been hacked.

Malware and viruses often enter devices through suspicious apps, unsafe downloads, or compromised websites. It can hide in files, run silently in the background, and even access personal data.

Here are some symptoms that could indicate a virus on your device:

• Unfamiliar apps you do not remember installing
• Rapid battery drain or overheating
• Unusual spikes in mobile data usage
• Frequent browser pop-ups, especially fake virus alerts
• Performance issues, like lag or slow loading

To remove malware or a virus from your Android device, follow the series of steps presented below:

1. Run an antivirus scan

Use a trusted antivirus app like Norton 360: Mobile Security to scan your device. Consider enabling real-time protection or scheduling regular scans.

2. Clear browser cache and cookies

Malware can hide in browser data. The steps to clear your browser data are dependent on the browser you use.

Depending on your browser, refer to the following support pages for instructions:

• Google Account Help > Clear cache & cookies
• Mozilla Support > Clear your browsing history in Firefox for Android

If you use a different browser, search for instructions on their support pages.

3. Reboot in Safe Mode

Safe mode disables third-party apps, helping isolate malware and viruses.

To reboot your device in Safe Mode:

1. Press and hold the power button on your device.
2. Tap and hold Power off on the screen.
3. Tap OK to enter safe mode.

If your device behaves normally in safe mode, malware may be hidden in a third-party app.

4. Remove suspicious apps and files

Review your apps and files:

• Uninstall apps with unusual permissions, duplicate icons, or poor design.
• Delete apps not downloaded from the official Google Play Store.
• Use Google’s Files app to inspect system folders.
• Avoid deleting system files unless confirmed by antivirus software.

5. Enable Google Play Protect

Google Play Protect scans apps for threats:

1. Open Google Play, tap your profile icon.
2. Go to Play Protect > Settings (the gear icon).
3. Tap the sliders next to Scan apps with Play Protect and Improve harmful app detection to switch from gray (off) to blue (on).

6. Perform a Google account security checkup

Your Google account might be compromised:

• Review saved passwords and change weak ones.
• Remove unknown devices from your account.
• Check for suspicious login activity.
• Enable two-factor authentication (2FA).
• Revoke access for unused third-party apps.

7. Complete a factory reset

If issues with your device persist, factory reset your Android device:

• Back up important data.
• Go to Settings > System > Reset options.
• Select Erase all data (factory reset).

8. Continue following best practices

• Monitor your Android device for signs of malware: pop-up ads, high data usage, or unfamiliar apps.
• Use a password manager and enable 2FA for added security.
• Keep your apps and operating system updated to patch vulnerabilities.
• Avoid downloading apps from unofficial sources.