Viruses on Xiaomi smartphones are a much more common problem than you think, even if you haven't identified suspicious ones. APK-files, malware can penetrate through banner ads, phishing sites or vulnerabilities in MIUI. The main danger: some viruses masquerade as system processes (for example, com.qualcomm.qti or android.system.intelligent), consume battery resources and tariff traffic, or even spy on you.
In this article, 5 working cleaning methods, from simple (antivirus scanning) to radical (full reset via Fastboot), we will discuss how to recognize infection, what tools to use for Redmi, Poco and Mi series, and what to do if a virus blocks access to settings. All methods are tested on current versions of MIUI 14/15 and HyperOS (2026).
Signs of infection: how to know that Xiaomi virus
The first step is to confirm that the virus is the problem, not a system failure or bug update.
- π The battery is discharged for 2-3 hours without active use (check in Settings) β Battery β Battery Use β Unknown Processes at the Top of the List).
- πΆ Mobile traffic βleaksβ even with applications turned off (in Settings) β SIM-maps and mobile networks β Use traffic to look for suspicious APK).
- π± Advertisements pop up in system menus (for example, in Wi-Fi settings or when unlocking the screen).
- π The phone itself reboots or opens unknown sites in the browser.
- π Unknown files appear in Download folders or DCIM (often with extensions.apk,.xapk).
The "Xiaomi Spyware" virus (spread through fake MIUI updates) is especially dangerous, creating hidden device administrators and blocking deletion through standard means. If you notice at least 2-3 signs from the list, proceed to clean up.
β οΈ Note: Some βsymptomsβ may mimic Xiaomiβs system processes, such as com.miui.analytics, a legitimate statistics collection service (you can turn it off in Settings). β Confidentiality β Analytics. Don't delete files at random!
Method 1: Scanning with built-in MIUI antivirus
MIUI Security (newer versions of Xiaomi Security) is a built-in tool that detects most advars and Trojans, and is not as powerful as third-party antiviruses, but does not require installation and works at the system level.
How to run the check:
- Open the Security app (shield icon).
- Go to the "Scanning" tab.
- Click "Full Check" (it will take 5-10 minutes).
- If threats are found, click "Delete" or "Isolate".
Attention to Autorun Management - there may be viruses hiding as legitimate applications (e.g., com.android.system with non-standard rights). APK.
βοΈ What to do after scanning MIUI Security
| Type of threat | How it manifests | Can MIUI Security be removed? |
|---|---|---|
| Advar (advertising virus) | Pop-up banners, redirect in the browser | Yes, 80% of the time. |
| Trojan (spyware) | Data theft, SMS to paid numbers | No, we need a third-party antivirus. |
| Rootkit (introducted into the system) | Hidden processes, blocking settings | No, it's a reset. |
| Fake MIUI Update | Notice "Update the firmware urgently!" | Yes, unless you have the admin license. |
Method 2: Removing viruses through Safe Mode
If the virus blocks the installation of antivirus or access to settings, launch the phone in Safe Mode. In this mode, all third-party applications, including malicious ones, are disabled.
How to Sign In to Safe Mode on Xiaomi:
- Press the power button until the shutdown menu appears.
- Press and hold the "Switch off" option (or "Reboot" on new models).
- Confirm the transition to safe mode (the inscription "Safe Mode" will appear at the bottom of the screen).
In Safe Mode:
- π± Remove suspicious apps through Settings β Annexes β Application management.
- π Check the list of device administrators in Settings β Passwords and security β Device administrators β viruses are often prescribed there.
- ποΈ Clear your browser cache and data (especially if ads appear in Chrome or Mi Browser).
π‘
If the virus is still active in Safe Mode (for example, blocking settings), it means that it has embedded in the system files, in which case only a factory reset or a Fastboot flashing will help.
β οΈ Note: Some viruses (e.g. Android.Triada) may recover from deletion if they have modified system files. /system/bin or /system/priv-app. In this case, Safe Mode is powerless β you need a reset.
Method 3: Third-party antiviruses β which work for Xiaomi
The built-in MIUI Security doesnβt always cope with modern threats. Use these antiviruses (tested on the Redmi Note 12 and Poco X5 Pro) for deep verification:
- π‘οΈ Malwarebytes is the best for removing advars and Trojans (the free version scans, but does not remove threats automatically).
- π Kaspersky Mobile Antivirus β detects even hidden rootkits (paid, but there is a 30-day trial).
- π± Bitdefender Mobile Security is easy to use, but requires registration.
- π Dr.Web Light is free, no ads, but databases are updated less often.
How to properly scan:
- Install the antivirus from the official store (Google Play or Mi App Store).
- Update virus databases manually (in antivirus settings).
- Start the Deep Scan (not fast!).
- If you find threats like Android.Trojan.Agent or AdDisplay, follow the instructions of the antivirus.
Important: Some viruses block the installation of antiviruses, giving an error "Application not installed." In this case, download APK directly from the official site (for example, Malwarebytes) and install through the file manager.
How to bypass the APK installation lock?
Method 4: Manual cleaning through ADB (for advanced)
If the virus has acquired a superuser (root) or has infiltrated system processes, only ADB (Android Debug Bridge) will help. This method requires a PC and basic command line knowledge.
Step-by-step:
- Download ADB Tools and unpack it on PC.
- On your phone, enable USB debugging: Settings β About Phone β MIUI Version (click 7 times until βYouβre a developerβ) Settings β Additional β Developers β Debugging by USB (enable)
- Connect your phone to your PC and in the command line (Windows: cmd) do: Adb devices should appear the name of your device.
- To remove a malicious application (e.g. com.virus.app), type: adb shell pm uninstall -k --user 0 com.virus.app
List of commands for diagnosis:
- View all installed packages: adb shell pm list packages
- Find device administrators (viruses are often prescribed here): adb shell dumpsys device_policy_manager
- Remove Admin rights from malicious APK: adb shell dpm remove-active-admin com.virus.app/admin
β οΈ Note: Do not delete Xiaomi system packages (starting with com.miui., com.xiaomi.) - this will cause your phone to fail.
π‘
ADB is the only way to remove viruses that have blocked access to your phoneβs settings, but it requires an unlocked bootloader or the commands wonβt work.
Method 5: Extreme measure - factory reset
If none of these methods work, you'll have to reset completely, and that will delete all the data from your phone, including viruses, but also erase your photos, contacts, and apps. First, back up!
How to reset Xiaomi to factory settings:
- Go to Settings β About the phone β Reset settings.
- Select "Erase all data."
- Enter your password (if installed) and confirm.
- Wait for the reboot (it will take 5-15 minutes).
If the virus blocks access to settings, reset via Recovery Mode:
- Turn off the phone.
- Press the power button + volume up until the Mi logo appears.
- Select the language, then "Wipe Data" β "Wipe All Data".
- Confirm the action and wait for the completion.
After discharge:
- π Do not restore data from a backup made before the infection - the virus may return.
- π± Install the antivirus first thing after setting up your phone.
- π Enable the installation lock from unknown sources in the security settings.
π‘
If the virus returned after the reset, it means that it was sewn into the firmware (for example, through a fake MIUI update), in which case only flashing through Fastboot from the official Xiaomi website will help.
How to protect Xiaomi from viruses in the future
Prevention is the best way to avoid infection.
- π Disable the installation from unknown sources (Settings) β Confidentiality β Special rights).
- π± Don't install it. APK from unverified sources (even if it is a hacked game or a free program).
- π Update regularly MIUI β New versions close vulnerabilities (check Settings) β The phone. β Updating the system).
- π‘οΈ Use antivirus with real-time scanning (e.g. Kaspersky or Bitdefender).
- π Do not connect to public Wi-Fi without VPN β Many viruses spread through vulnerabilities in networks.
Special attention is paid to phishing sites that mimic Xiaomiβs official pages, such as scammers sending links to βMIUI updatesβ or βgift promotionsβ that actually install the virus. All official updates come only through Settings β System Update!
β οΈ Warning: Viruses are often disguised as useful utilities, such as a "cache cleaner" called com.clean.master (actually showing fake infection notifications); a "game accelerator" com.game.booster.fake (steals Google account data). MIUI" com.miui.update.fake (locks your phone and requires payment for unlocking). Before installing any app, check its name and developer with Google.