Viruses on Xiaomi smartphones are a much more common problem than you think, even if you don't download suspicious ones. APK-files, malware can penetrate through banner ads, phishing sites or firmware vulnerabilities MIUI. The main danger: some viruses masquerade as system processes (for example, com.qualcomm.qti or android.process.media), and their antiviruses do not detect them.
This article is not just a list of tips, but a structured algorithm that will help even when the phone slows down, spontaneously opens ads or discharges in 2 hours. We will analyze both software methods (through safe mode and antivirus) and hardware (reset to factory settings, firmware), and pay special attention to hidden threats in firmware for Chinese regions (Global vs China ROM), about which few people warn.
Signs of infection: how to know that Xiaomi virus
The first step is diagnostics. Xiaomi viruses are rarely obvious (unlike PCs), but there are 12 key symptoms:
- π± Advertising in unexpected places: banners on top of lock screens, in the settings menu or even in the gallery.
- π Battery consumption: the phone is discharged 3-4 hour with minimal load (check settings) β Battery β Use of the).
- π‘ Suspicious traffic: Mobile internet flies away at night or without active use (see Settings) β SIM-maps and mobile networks β Traffic).
- π€ Unknown applications: in the list of installed programs (Settings) β Annexes β App management) are being introduced with names like com.system.update or android.helper.service.
Less obvious signs:
- π Blocking access to security settings or developer menus.
- π SMS sending to short numbers (check Message Log).
- π Restart for no reason, especially after connecting to Wi-Fi.
- π² New contacts appear in a phone book with unfamiliar names (e.g., "Support" or "Service").
If you notice at least 2-3 items from the list, the probability of infection is more than 80%. But don't panic: most viruses on Xiaomi are deleted without losing data. The exception is rootkits (embedded in system files), which can only be completely reflashed.
β οΈ Note: Some βvirusesβ are actually built-in ads MIUI (Before cleaning, check the region of your firmware in Settings. β The phone. β Version. MIUI. If there are characters in it, the problem is not the virus, but the Global one. ROM.
Step 1: Safe Mode β How to Isolate the Virus
Safe Mode on Xiaomi runs a system with a minimum set of drivers and blocks all third-party applications, which will help to understand whether the problems are due to a virus or system failures.
How to enter Safe Mode:
- Press the power button before the off menu appears.
- Press and hold the "Switch off" option (or "Reboot" on new models).
- Confirm the Safe Mode login (the screen will show the inscription "Safe Mode" at the bottom).
In safe mode:
- π Check if the symptoms of infection (advertising, brakes) have disappeared).
- π± Remove suspicious apps through Settings β Annexes.
- π Launch the built-in security scanner (Security) β Scanner).
Checking for advertising|Removal of unknown applications|Security scanner MIUI|Checking battery consumption|Internet speed test-->
If the problems in Safe Mode are gone, the virus is hidden among the programs you install, and if not, it is built into the system (reset or flash).
β οΈ Note: On some models POCO And Redmi with custom firmware, the safe mode may not work, so you can start resetting your settings right away.
Step 2: Deep Clean Up with Antiviruses (TOP-3 for Xiaomi)
The standard MIUI scanner detects only 30-40% of threats, and for full verification you need specialized antiviruses optimized for Xiaomi:
| Antivirus | Efficiency | Features | Link (Google Play) |
|---|---|---|---|
| Malwarebytes | 98% | Finds rootkits and spyware, does not conflict with MIUI | Download |
| Bitdefender | 95% | Minimum battery load, scans in real time | Download |
| Kaspersky (beta) | 93% | Best for phishing link detection, but can slow down older models | Download |
How to properly scan:
- Install one antivirus (multiple conflicting at the same time).
- Turn off battery optimization for it in Settings β Apps β Permissions β Battery Optimization.
- Start a full scan (not fast!).
- Remove all threats and reboot your phone.
π‘
If the antivirus is a threat Android/Trojan.Downloader, But you can't delete it, it's a sign of an embedded virus.
Important: Even after cleaning, the antivirus can show false positives on MIUI system files (for example, com.miui.analytics). This is not a virus, but Xiaomi telemetry - it can be turned off in Settings β Additional β Privacy β Diagnostics.
Step 3: Reset to factory settings (Hard Reset)
If the virus is not removed by antivirus or comes back after a reboot, the only reliable way is to completely reset, and Xiaomi does this in two ways:
Method 1: Through the settings menu (if the phone is working)
- Open Settings β About the phone β Reset settings.
- Select "Erase all data."
- Enter your password (if required) and confirm.
- Wait for the reboot (it will take 5-10 minutes).
Method 2: Recovery Mode (if the phone is locked)
- Turn off the phone.
- Press the power button + volume up until the Mi logo appears.
- In the Recovery menu, select Wipe Data β Wipe All Data (manage volume buttons, confirm β power button).
- After reset, select Reboot β Reboot to System.
What to do if the virus returns after resetting?
After discharge:
- π Do not restore data from a backup (the virus may be in it!).
- π₯ Install apps only from Google Play.
- π Enable the installation lock from unknown sources in Settings β Annexes β Special access β Installation of unknown applications.
β οΈ Attention: On models POCO F1/F2 Redmi Note 8 Pro after reset may disappear IMEI. It's not a virus, it's a firmware bug. IMEI You can use the engineering menu (##4636##) program SN Writer Tool.
Step 4: Manually remove viruses through ADB (for advanced)
If you're familiar with Android Debug Bridge (ADB), you can manually remove the virus without resetting, a method that works for system viruses that aren't removed by standard methods.
Instructions:
- Put the debugging on. USB In Settings β The phone. β Version. MIUI (press 7 times on "Version" MIUI", Then go back to the settings. β Additionally. β For developers β Debugging by USB).
- Connect your phone to your PC and install ADB Tools.
- Open the command line (Windows) or the terminal (Mac/Linux) and type:
adb devices(Your device should appear)
adb shell
pm list packages | grep 'suspicious_keyword'(substitute suspicious_keyword a part of the name of a suspicious package, such as a bootloader or systemupdate)
pm uninstall -k --user 0 com.virus.package.name(Replace com.virus.package.name with the found packet name)
Examples of dangerous packages on Xiaomi:
- com.android.system.update β often disguised as a system update.
- com.qualcomm.qti.telephonyservice β may be legitimate, but sometimes replaced by a virus.
- com.miui.analytics is not a virus, but collects data (you can turn it off).
π‘
ADB-It only removes the virus for the current user, and if it's built into the system partition, it will come back after the reboot.
Step 5: Fastboot Flashing (Extreme Method)
If all the previous steps didn't work, the virus will be sewn into the firmware.
- π¦ Phones with custom firmware (for example, LineageOS or Pixel Experience).
- π¨π³ Devices with China ROM, where the spyware is pre-installed.
- π§ Devices after "repair" in unofficial services (could flash infected firmware).
You'll need to flash it back:
- π₯οΈ Windows PC 10/11 (For the Mi Flash Tool).
- π Cable USB (preferably original).
- π Official firmware for your model (download from Xiaomi website).
- π§ Mi Flash Tool Programming.
Step-by-step:
- Unpack the firmware (file with.tgz extension) in a folder without Cyrillic.
- Turn off your phone and press the power button + volume down to log in to Fastboot Mode.
- Connect your phone to your PC and start the Mi Flash Tool.
- Click "Select" and indicate the path to the unpacked firmware.
- Select the "Clean All" mode.
- Press Flash and wait until it is completed (10-15 minutes).
π‘
Once you flash it, it's like new, no Mi Account, no data. Don't restore backups from before you infected it!
Important: on models with a locked bootloader (Redmi Note 10/11, POCO X3/X4), you need to unlock Bootloader through the official Xiaomi tool before the firmware. This will take 7-14 days (you need to link the Mi Account).
Step 6: Protecting Xiaomi from viruses in the future
To avoid re-infection:
- π‘οΈ Disable the installation from unknown sources (Settings) β Annexes β Special access β Installation of unknown applications).
- π Do not click on the shortened links (bit.ly, goo.gl) in the SMS messenger.
- π± Install antivirus with real-time protection (we recommend Bitdefender).
- π Update regularly MIUI (New versions are closing vulnerabilities).
- π Use it. VPN When connecting to public Wi-Fi (e.g. ProtonVPN).
- π¦ Check the permissions of the applications before installation (if the messenger requests access to the app). SMS β It's suspicious).
Pay special attention to the firmware:
- π¬π§ Install only Global ROM (international market).
- π« Avoid Firmware from Forums 4PDA or XDA β They may contain backdoors.
- π Check the hash sums (MD5) downloaded firmware on the official website of Xiaomi.
π‘
Most of the viruses on Xiaomi are coming through fake ones. APK-files (e.g., "mods" for games or "hacked" versions of applications) Never download APK from torrents or file-sharing!