How to remove a virus on Xiaomi: 5 proven ways (2026)

Viruses on Xiaomi, Redmi or POCO smartphones are not just annoying ads, but a real threat to the security of your data. Attackers use vulnerabilities in MIUI to steal logins, bank details or even remote control of the device. Unlike computers where antiviruses work around the clock, on Android viruses often disguise themselves as system processes, and users notice them only when the smartphone starts to “glut”: windows open spontaneously, the battery runs out in an hour, or unknown applications appear.

This article is not about magic buttons, but about a systematic approach, from diagnosing infection to completely removing the virus to ensure that it does not return. We will discuss current methods for MIUI 14/15, including hidden shell functions that are not described in the official documentation.

Signs of a virus infection on Xiaomi

The first step is to confirm that the virus is the problem, not the system failure, and here are the key symptoms that should alert you:

• 📱 Unknown apps on the menu (often with Chinese characters in the title or suspicious permissions).
• 🔋 A sharp drop in autonomy: the battery sits behind 2-3 hourly.
• 🌐 Advertising in unexpected places: banners on top of system windows, in settings or even on the lock screen.
• 📤 Spontaneous distribution SMS or social media posts (the virus may use your account to spam).
• 🔒 Blocking access to Settings → Applications or Security.

Viruses that masquerade as MIUI system services are especially dangerous, such as com.android.system, com.qualcomm.telephony or com.xiaomi.mipicks. They cannot be removed by standard methods - special tools will be required.

⚠️ Warning: If the smartphone started to overheat without loading (temperature above 50)°C in plain), this could be a sign of cryptocurrency mining through a virus. Check processor activity in Settings → Battery → Battery utilization.

Method 1: Removing the virus through safe mode

Safe Mode only loads system applications, blocking all third-party applications, including viruses, and is the most reliable way to remove infected software if the virus has not infiltrated system files.

How to run Safe Mode on Xiaomi:

1. Turn off your smartphone.
2. Press the power button before the MI logo appears.
3. Once the logo appears, press and hold the volume button until the download is complete.
4. In the lower left corner of the screen will appear the inscription Safe Mode.

In safe mode:

If the virus blocks removal, try revoking its administrator rights:

1. Go to Settings → Passwords and Security → Device Administrator Rights.
2. Uncheck the boxes from unknown applications.
3. Go back to Settings → Apps and delete them.

⚠️ Note: Some viruses (e.g. xHelper) recover after rebooting. If the virus returns after leaving safe mode, proceed to method 3 (reset via Fastboot).

Method 2: Using the built-in MIUI antivirus

MIUI has a built-in security scanner that can detect and remove most viruses, but it's not always effective against new threats or rootkits.

1. Open the Security app (shield icon).
2. Go to the Scanner tab.
3. Click Full Check (not quick!).
4. Wait until it is completed (it can take 10-15 minutes).
5. Delete or deactivate any threats you find.

If the scanner does not find the virus, but you are sure of infection, try updating the databases:

• In the same Security app, go to Settings → Database Update.
• Update the databases and repeat the scan.

💡

If the built-in antivirus doesn’t work, install Malwarebytes or Dr.Web Light from Google Play. They are better at detecting hidden threats, but require root rights to remove them completely.

Method 3: Hard reset via Fastboot (for advanced)

If a virus has been embedded in system files and is not removed by standard methods, only a full reset via Fastboot will help.This method erases all data on the device, but is guaranteed to remove even the most persistent viruses.

You'll need:

• 🖥️ A computer with installed Xiaomi drivers and ADB/Fastboot.
• 🔌 USB-cable (original, not cheap fake).
• 📄 Firmware for your model (download from the official website).

Step-by-step:

1. Turn off your smartphone.
2. Press Power + Volume down before the Fastboot logo appears.
3. Connect your phone to your PC and open the command line in the folder with the platform-tools.
4. Enter the commands in turn: fastboot devices (should display the serial number of the device) fastboot erase userdata fastboot erase cache fastboot flash system.img (replace system.img with the current name of the firmware file)
5. Upon completion, type in fastboot reboot

⚠️ Note: Some viruses (such as Triada) can survive even after being dumped via Fastboot if they have been modified. boot.img. In this case, you need a full flashing through the Mi Flash Tool with a clean all checkmark.

Method 4: Manual removal via ADB (for power users)

If the virus blocks access to settings, but you don't want to reset, you can try to delete it via ADB (Android Debug Bridge), which requires debugging over USB enabled.

How to enable debugging if the virus blocks settings:

Instructions for removal through ADB:

1. Connect your phone to your PC and confirm access to debugging.
2. In the command line, type: adb shell
3. Get a list of packages: pm list packages -f (look for suspicious names, such as com.android.fakeupdate)
4. Delete the virus packet: pm uninstall -k --user 0 name.packet

Viruses are often disguised as system packages with names like com.qualcomm.services or com.android.providers. Before deleting, check the name of the package in Google - system files can not be deleted!

Method 5: Flashing through the Mi Flash Tool (extremely)

If all the previous methods failed, all that remains is a complete flashing through the Mi Flash Tool, which will erase all data, but return the smartphone to the factory state.

What you need:

• 🖥️ Windows PC (7/10/11).
• 📁 Fastboot firmware for your model (download from xiaomifirmwareupdater.com).
• 🛠️ Mi Flash Tool Programming.

Step-by-step:

1. Unpack the firmware in a folder without Cyrillic characters (for example, C:\Xiaomi\ROM).
2. Install the Mi Flash Tool and drivers.
3. Turn off the phone and press Power + Volume Down to log into Fastboot.
4. Connect the phone to the PC.
5. In the Mi Flash Tool, click Select and select the folder with the firmware.
6. At the bottom, select Clean All (complete cleaning).
7. Press Flash and wait until it is completed (5-10 minutes).

💡

After flashing, be sure to update MIUI to the latest version via Settings → System Update. Outdated versions of the shell are vulnerable to re-infection.

How to protect Xiaomi from viruses in the future

Even after the virus is removed, the smartphone remains vulnerable if security measures are not taken.

• 🔒 Disable the installation from unknown sources: Settings → Privacy → Special permits → Installation of unknown applications.
• 🛡️ Install antivirus with real protection (not just scanner.
• 🔄 Update regularly MIUI. New versions close vulnerabilities that exploit viruses.
• 📥 Don't install it. APK from unverified sources (especially hacked games or modified firmware).
• 🔐 Use an ad blocker (such as Blokada or AdGuard) to prevent infection through banners.

Pay particular attention to application permissions. Viruses often request access to:

• 📇 Contacts (for spamming).
• 💳 SMS (to steal codes from bank notices).
• 📍 Geolocation (for targeted advertising or espionage).
• 🔧 Special features (e.g., Accessibility Service for screen capture).

Check permissions in Settings → Apps → Manage permissions and revoke unnecessary ones.

FAQ: Frequent questions about virus removal on Xiaomi