🖨️ Click Here to Print

To remove malware from your Android device immediately, disconnect your phone from the internet by enabling Airplane Mode to stop data theft. Once isolated, you can systematically find and destroy the virus using the steps below. [1, 2, 3]

1. Boot into Safe Mode 

Safe Mode prevents third-party apps and malicious code from running in the background, allowing you to delete them safely. [1, 2]

1. Press and hold your device's physical Power button.

2. Tap and hold the Power Off or Restart icon on your screen.

3. Confirm the prompt to eboot in Safe Mode.

4. Your phone will restart, and you will see "Safe Mode" written at the bottom of the screen. [1, 4, 5, 6, 7]

2. Revoke Device Admin Permissions

Many malicious apps sneakily grant themselves administrator rights so that the "Uninstall" button is greyed out. [2, 8]

1. Open your phone's Settings.

2. Navigate to Security & Privacy > More security settings > Device admin apps. (The exact name may vary slightly depending on your manufacturer.

3. Look for any suspicious or unfamiliar apps in the list.

4. Toggle them Off and select Deactivate. [4]

3. Uninstall Suspicious Apps

Now that the malware is paralyzed and stripped of admin rights, you can delete it. [2, 4]

1. Inside Settings, go to Apps > See all apps.

2. Filter or sort by Most recently installed if possible.

3. Look for things you do not recognize, apps with generic names (like "System Service"), or apps without an icon.

4. Tap the malicious app and choose Uninstall. [1, 4, 8]

4. Delete Malicious Files & Browser Data

Malware often leaves behind installers or hides scripts inside your web browser. [2, 9]

• Clear Downloaded Files: Open your default Files app, navigate to the Downloads and Installation files (.APK) folders, and delete any unrecognized items. [10, 11, 12, 13]

• Clean Browser Cache: Open Google Chrome, tap the three dots in the corner, choose History > Clear browsing data. Set the time range to All time, check all boxes (History, Cookies, Cached files), and tap Delete data. [14]

5. Run a Security Scan

Turn your internet back on, restart your device normally to exit Safe Mode, and run these scans to catch any lingering components: [4, 9]

• Google Play Protect: Open the Google Play Store, tap your profile icon, choose Play Protect, and click Scan.

• Third-Party Antivirus: Download a highly rated mobile security tool from the Play Store—such as Malwarebytes Mobile Security, Bitdefender Antivirus Free, or Kaspersky Antivirus for Android—to perform a deep system audit. [4, 15, 16, 17]

Last Resort: Factory Reset

If your phone is heavily hijacked and the steps above fail, you must perform a factory reset. This completely wipes the device. Go to Settings > System > Reset options > Erase all data (factory reset). Only restore data from a cloud backup that was created before the malware symptoms started. [1, 9, 15, 18, 19]

If you are stuck on a specific step, tell me your phone's model (e.g., Samsung Galaxy S23, Google Pixel 8) and what symptoms you are seeing (like constant pop-up ads or a locked screen) so I can give you exact instructions.

[1] https://www.bitdefender.com

[2] https://www.youtube.com

[3] https://sase.checkpoint.com

[4] https://proton.me

[5] https://antivirus.comodo.com

[6] https://www.pandasecurity.com

[7] https://www.certosoftware.com

[8] https://www.bitdefender.com

[9] https://malware.news

[10] https://www.avast.com

[11] https://www.eset.com

[12] https://www.youtube.com

[13] https://dataprot.net

[14] https://www.youtube.com

[15] https://www.malwarebytes.com

[16] https://me-en.kaspersky.com

[17] https://www.bitdefender.com
[18] https://www.avast.com

If you are seeing a scary pop-up claiming your computer is infected and instructing you to call "Microsoft Support," do not call the number. This is a common tech support scam. Microsoft warning messages never include a phone number, and they will never proactively reach out to you to fix your device. 

Get rid of the pop-up immediately and secure your device with these steps: 

1. Force Close the Browser: Press Ctrl + Shift + Esc on your keyboard to open the Task Manager. Look for your browser (like Microsoft Edge or Google Chrome) under the Processes tab, right-click it, and select End Task. 

2. Restart Your Computer: If the pop-up has locked your entire screen, perform a hard reset by holding down your computer's physical power button until it shuts off. Turn it back on and check if the malicious page has reloaded.

3. Run a Virus Scan: To make sure no adware or malware was downloaded, use the built-in Windows Security (search for "Windows Security" in your Start menu) or a reputable third-party tool like Malwarebytes to scan your system

8 Phishing Safety Tips

1. Don’t click. Instead of clicking on any link in a suspicious email, type in the URL or search wustl.edu for the relevant department or page. Even if a website and/or URL in an email looks real, criminals can mask its true destination.

2. Be skeptical of urgent requests. Phishing messages often make urgent requests or demands. When you detect a tone of urgency, slow down and verify the authenticity of the sender and the request by using official channels rather than the information provided by the sender.

3. Watch out for grammar, punctuation, and spelling mistakes. Phishing messages are often poorly written. Common hallmarks of phishing are incorrect spelling, improper punctuation, and poor grammar. If you receive an email with these problems, it may be a phishing attempt. Double-check the email address of the sender, don’t follow any links, and verify the authenticity of the request using official channels.

4. Keep your information private. Never give out your passwords, credit card information, Social Security number, or other private information through email.

5. Pick up the phone. If you have any reason to think that a department or organization really needs to hear from you, call them to verify any request for personal or sensitive information. Emails that say “urgent!”, use pressure tactics, or prey on fear are especially suspect. 

6. Use secure websites and pay attention to security prompts. Always check if you are on a secure website before giving out private information. You can determine whether a website is secure by looking for the “https:” rather than just “http:” in the Web address bar or for the small lock icon in the Internet browser. If your browser cannot validate the authenticity of the website’s security certificate, you will be prompted. This is frequently a telltale sign of fraud, and it would be a good time to pick up the phone or report a suspicious message.

7. Keep track of your data. Regularly log onto your online accounts and make sure that all your transactions are legitimate.

8. Reset any account passwords that may have been compromised.