Viruses on Xiaomi smartphones are a much more common problem than you think, even if you haven't identified suspicious ones. APK-files, malware can penetrate through banner ads, phishing sites or firmware vulnerabilities MIUI. The main danger: some viruses disguise themselves as system processes (for example, com.qualcomm.qti or android.system.intelligence), which makes them difficult to detect by standard means.
In this article, we'll look at 7 working methods for removing viruses from Redmi, POCO and Mi phones, including hidden threats that antiviruses often miss. We'll look at both manual cleaning through settings and radical measures like factory reset. Importantly, some malware types (like Triada or Agent Smith) are able to survive even after flashing β removing them requires a special approach.
Signs of infection: how to know that Xiaomi has a virus
The first step is diagnostics. The viruses on Xiaomi are different, but there are universal symptoms.
- π± Spontaneous installation of applications (most often games or "optimizers" with annoying advertising).
- π Sharp battery consumption even in standby mode (check Settings) β Battery. β Battery use β unknown processes at the top of the list should alert).
- πΆ Suspicious traffic: the phone is βeatingβ the Internet without your participation (see Settings) β SIM-maps and mobile networks β Traffic).
- πΈ Write-offs for money SMS Subscriptions that you have not signed up for.
- π Advertising in unexpected places: banners on top of lock screens or in system notifications.
Trojan-Dropper is especially dangerous, blocking access to security settings and can replace MIUI system files, making the phone unmanageable, and if symptoms return after a reboot, it is a sure sign that the virus has penetrated deeply.
β οΈ Note: Some "symptoms" may not be caused by viruses, but by firmware errors. MIUI 14 is known for a bug with background battery consumption process android.system. Before cleaning, check the relevance of updates in Settings β The phone. β Updating the system.
Method 1: Removing the virus through safe mode
Safe Mode only loads system applications, blocking third-party applications β including viruses β and is the fastest way to remove malware if it doesnβt get into the MIUI kernel.
How to Sign In to Safe Mode on Xiaomi:
- Press the power button until the shutdown menu appears.
- Press and hold the "Switch off" item (on some models - "Reboot").
- Confirm the safe mode entry (the βSafe Modeβ will appear at the bottom of the screen).
In this mode:
- π Check the list of installed applications (Settings) β Annexes β Application management).
- ποΈ Remove suspicious programs (especially those that are not deleted in normal mode).
- π‘οΈ Run the scan with the built-in Security Scan (Settings) β Memory. β Security check).
β οΈ Note: Some viruses (e.g. HiddenAds) can recover after a reboot. If the problem returns after you leave Safe Mode, go to method 3 (reset settings).
Method 2: Manual removal via ADB (for experienced)
If the virus blocks access to settings or masquerades as a system application (such as com.miui.analytics), Android Debug Bridge (ADB) will help.
Step-by-step:
- Turn on USB debugging on your phone: Settings β About Phone β MIUI version (click 7 times until the message βYouβre a developerβ appears). Then go back to Settings β Additional β Developers β Debugging on USB.
- Connect your phone to your PC and run the command line (Windows) or terminal (macOS/Linux).
- Enter the commands in order: adb devices (should appear serial number of your device). adb shell pm list packages -f (list of all installed packages - look for suspicious). adb shell pm uninstall --user 0 name packet (replace the name packet with the virus found, for example com.virus.fakeapp).
Examples of dangerous packages that are often disguised as system packets:
| Package name | What's he doing? | Danger. |
|---|---|---|
| com.android.fakeinstaller | Installs advertising applications | Write off money for money. SMS-subscription |
| com.qualcomm.qti.telephonyservice | Fake system process | Stealing data and sending it to a remote server |
| com.miui.daemonprovider | Imitating MIUI service | Shows ads in notifications |
| com.google.play.update | Fake Google Play Update | Set up Trojans |
β οΈ Note: Removing system packages through ADB Do not delete anything unless you are 100% sure! Use VirusTotal to check (download) APK-file).
βοΈ Preparation for cleaning through ADB
Method 3: Reset to factory settings (Hard Reset)
If the virus is not removed through either Safe Mode or ADB, the radical method is a complete reset, which will remove all data from the phone, including viruses, but return the firmware to its original state.
How to make Hard Reset on Xiaomi:
- Back up important data (photos, contacts, messages) through Settings β About Phone β Backup or Mi Cloud.
- Go to Settings β About the phone β Reset settings.
- Select "Delete all data" and confirm the action.
- After the reboot, the phone will be like new β there will be no viruses on it (if they do not infiltrate the bootloader).
For models with blocked access to settings (for example, due to a virus-blocker):
- π Turn off the phone.
- π Press the power button. + volume up until the Mi logo appears.
- π± In the recovery menu, select Wipe Data. β Wipe All Data (Management β Volume and Power buttons).
What if the virus returned after resetting?
Method 4: Fastboot Fastboot Fastboot Fastboot (for advanced ones)
If the virus survived the reset, it likely modified the system files, and the only way out is to completely flash through Fastboot mode, a method that works for all Xiaomi models, but requires unlocking the bootloader.
Step-by-step:
- Unlock the bootloader through the official Xiaomi tool (can take up to 72 hours).
- Download the official firmware for your model from MIUI Downloads (choose the Fastboot version, not Recovery).
- Connect your phone to your PC in Fastboot mode (clip the power + volume down when the phone is off).
- Run the firmware script: fastboot flash all name file.tgz (for Windows) or./flash_all.sh (for macOS/Linux).
After flashing:
- π Lock the bootloader back (via fastboot oem lock).
- π‘οΈ Install antivirus (recommended Malwarebytes or Bitdefender).
- π Update your firmware to the latest version through Settings β Updating the system.
π‘
Before firmware check the hash of the downloaded file (MD5) on the Xiaomi website β this will save you from installing fake firmware with viruses.
Method 5: Use antivirus software (but not all!)
Android antiviruses are often useless against deeply embedded viruses, but they can help in the early stages of infection.
| Antivirus | Efficiency | Cons |
|---|---|---|
| Malwarebytes | βββββ (Best to remove adware) | No real-time protection |
| Bitdefender | ββββ (scanner) | Paid version for full protection |
| Kaspersky | βββ (average) | Lots of false positives |
| Dr.Web | ββ (weak-minded) | Slowing down the phone. |
How to properly scan:
- Install the antivirus from the official store (not from third-party sites!).
- Start a full scan (not fast!).
- Remove all threats and reboot your phone.
- Repeat the scan after 2-3 days β some viruses are not activated immediately.
β οΈ Note: Do not install antiviruses from unknown developers (such as Super Cleaner or Virus Cleaner 2026.
Method 6: Virus testing without installing software
If you donβt trust antivirus software or are afraid of making things worse, use online scanners:
- π VirusTotal β Download the suspicious APK-file (e.g. from a folder) /data/app).
- π OPSWAT MetaDefender β scan files for 30+ antivirus engines.
- π± Avast One (free version) β has the function of checking installed applications without full installation.
How to check system files:
- Connect the phone to the PC and enable file transfer.
- Copy suspicious files (e.g. from /system/priv-app) to your computer.
- Upload them to VirusTotal for analysis.
If the scanner detects a virus in the system file (for example, /system/bin/su), It cannot be removed without root permission. In this case, only the flashing will help (see Method). 4).
π‘
Online scanners don't remove viruses, they only detect them. Use other methods from this article to clean your phone.
Method 7: Protecting Xiaomi from viruses in the future
The best protection is prevention, and follow these rules to minimize the risk of infection:
- π Disable the installation from unknown sources: Settings β Annexes β Special rights β Install unknown applications (block all items).
- π‘οΈ Update. MIUI β New versions are designed to close vulnerabilities (especially critical for Redmi). 9/9A and POCO X3, wormhole).
- π« Do not click on ads in your browser, especially with suggestions to βaccelerate your phoneβ or βwin your iPhone".
- π₯ Download. APK only from trusted sources (e.g. APKMirror).
- π Periodically check the application rights: Settings β Annexes β Permits (remove access to the SMS/Contacts with suspicious programs).
For root-right models (for example, after unlocking the bootloader):
- Install Magisk and Universal SafetyNet Fix to help you bypass some security limitations.
- Use AFWall+ to block network access from unwanted applications.
On Xiaomi phones with MediaTek processors (such as Redmi 10A or POCO M4), viruses are more likely to be embedded through vulnerabilities in drivers. Regularly check for updates for MediaTek Security Patch in the settings.