How to completely remove the virus from Xiaomi Redmi 9: 7 proven ways

Viruses on Xiaomi Redmi 9 are not just annoying ads or suspicious notifications; they are a real threat to your data, accounts and even bank cards. In 2026, scammers are actively exploiting vulnerabilities in MIUI (especially on older versions of firmware), masking malware as useful utilities, games or updates. The main problem is that many users are not even aware of the infection, writing off the phone brakes as “weak hardware” or “curve firmware”.

This article is not just another retelling of common tips like “installe antivirus.” We will analyze the specific symptoms of infection for Redmi 9 (including Redmi 9A/9C/9T models), show how to find hidden threats in system folders, and give instructions to remove viruses without losing data. And if the phone is already blocked by ransomware, we will tell you how to return control with minimal losses. All methods are tested on current versions of MIUI 14 and Android 11/12.

Signs of a virus on Xiaomi Redmi 9: how to recognize infection

Viruses on Redmi 9 rarely appear as bright banners "Your phone is infected!" - modern malware acts secretively. Here are 7 key symptoms that should alert you:

• 🔋 Battery sits down in 2-3 hours without active use (virus can mine cryptocurrency in the background).
• 📱 The phone spontaneously restarts or turns off when you open certain applications (for example, banking applications).
• 💰 They disappear from the account or come in. SMS About write-offs (trojans intercept confirmation codes).
• 📎 Unknown apps with names like “System Update”, “Flash Player” or “Clean Master” appear (they are not on Google Play).
• 🌐 Traffic goes to nowhere (check Settings) → SIM-maps and mobile networks → Using traffic).
• 📸 The camera or microphone turns on itself (spyware can spy on you).
• 🔒 Blocking the screen with a demand for payment (extortionists encrypt files and require transfer to the Internet) Qiwi/Bitcoin).

The FakeApp virus, which masquerades as a MIUI update and requests administrator rights, is particularly dangerous.

• 📲 Substitute the numbers SMS (For example, instead of a bank, you send a code to scammers).
• 🔄 Redirect calls to paid numbers.
• 📂 Delete files or encrypt photos/video.

⚠️ Warning: If the phone stops turning on after infection or shows a Fastboot Mode that says "This device is locked" - the virus damaged the bootloader. In this case, do not try to sew the phone through Mi Flash: this can lead to complete "brick" (irreparable damage). First try the methods in the Recovery section".

Step 1: Put your phone in safe mode

Safe Mode is an Android diagnostic mode where all third-party apps are disabled, and if the virus disappears in this mode, the problem is precisely in the installed software.

How to run Safe Mode on Xiaomi Redmi 9:

1. Press and hold the power button until the off menu appears.
2. Press the “Switch Off” icon with your finger (don’t let go!).
3. After 2-3 seconds, you will be asked to switch to Safe Mode.

In safe mode:

• 🔍 Check if the symptoms of infection have gone away (advertising, brakes, unknown apps).
• 📱 Remove suspicious programs through Settings → Annexes → Application management.
• 🔧 Disable Administrator Rights for Unknown Applications (path: Settings) → Passwords and security → Application authorizations → Special access → Administrator rights).

⚠️ Note: Some viruses (such as Agent Smith) may block the exit from safe mode. If the phone loads again in Safe Mode after rebooting, reset via Recovery (instruction in Section 5).

💡

If the phone is working normally in safe mode, but after a normal boot, the symptoms return - the virus is hiding in one of the system processes. Use the "Folder Search" method from section 3.

Step 2: Find and remove viruses through system folders

Many of the viruses on Redmi 9 hide in folders that are not visible through standard Explorer, and you will need a root file manager (like FX File Explorer or Solid Explorer) to find them. If root is not, use MI File Manager with hidden file display mode enabled.

Where to look for viruses:

How to delete the found files:

1. Open the file manager and follow one of the paths above.
2. Select a suspicious file/folder and click "Delete".
3. If you have an error "Operation not allowed" - the virus is protected. Use ADB (instruction in section 4).

Step 3: Use antivirus software (which works on Redmi 9)

Not all antiviruses are equally useful, such as the Clean Master or the DU Speed Booster can themselves be the source of viruses.

• 🛡️ Malwarebytes – finds Trojans and spyware, does not conflict with MIUI.
• 🔍 Kaspersky Mobile is effective against ransomware).
• 📱 Bitdefender Mobile is lightweight for weak processors (suitable for Redmi) 9A).

How to check your phone with antivirus:

1. Download antivirus from Google Play (not from third-party sites!).
2. Start a full scan (not fast!).
3. If you find threats like “Android/Trojan.Spy” or “AdWare.Elex”, remove them through the antivirus.
4. Restart your phone and check for symptoms.

⚠️ Note: Some viruses block the installation of antiviruses. If you download an error "failed to download", use APK-file from an official website (e.g. Malwarebytes) but before installing it, disable Google Play Protect in the security settings - it can falsely trigger legitimate ones APK.

Step 4: Removing viruses through ADB (for power users)

ADB (Android Debug Bridge) is a tool for controlling your phone through a computer, which will help you remove viruses that are not removed by standard methods.

• 💻 Computer with Windows/Linux.
• 🔌 USB-cable (preferably original).
• 📦 Installed drivers Xiaomi and ADB.

Instructions:

1. Turn on USB debugging on your phone: Settings → About Phone → MIUI Version (click 7 times until “You’re a developer”) Settings → Additional → Developers → Debugging on USB (enable)
2. Connect your phone to your computer and open Command Prompt (Windows) or Terminal (Linux/Mac).
3. Enter the commands in turn: adb devices (you should have the name of your device) adb shell pm list packages -f | grep "suspicious name" (e.g. grep "com.android.fake") pm uninstall -k --user 0 name packet

Example of removal of the com.android.fakeupdate virus:

pm uninstall -k --user 0 com.android.fakeupdate

💡

ADB allows you to remove system applications without root rights, but be careful: an erroneous removal can cause MIUI to fail.

Step 5: Recovery through Recovery (if the virus has blocked the phone)

If the virus has blocked the screen, encrypts files or prevents the system from booting, Recovery Mode will help. Redmi 9 has two recovery options:

1. Soft Reset – deletes all data but leaves the firmware intact.
2. Hard Reset – returns the phone to factory settings (viruses are deleted, but all data is lost).

How to get in to Recovery:

1. Turn off the phone.
2. Press the power button + volume button for 10 seconds.
3. Let go when the Mi logo appears.
4. Select the language (volume buttons) and go to the menu.

Next:

• 🔄 For Soft Reset: Select Wipe Data → Wipe All Data.
• 🔧 For Hard Reset: Select Wipe Data → Format Data (you will need to enter a password if it was set).
• 📱 After reset, select Reboot → Reboot to System.

⚠️ Note: If after a reset, the phone requires you to enter a Mi Account and you do not remember it, this is a hardware lock (Mi Account Lock), which can only be removed through the official Xiaomi service with proof of ownership (check or box). Self-attempts to bypass will lead to complete blocking IMEI!

Step 6: Flashing the phone (last resort)

If the virus has damaged the system files and none of the methods have worked, it's still firmware. Redmi 9 has two official ways:

• 📲 Through the Mi Flash Tool (full firmware, removes everything, including viruses in the file) /system).
• 🔄 Through OTA-Update (if the virus does not block the download of updates).

The following is a step-by-step guide for the Mi Flash Tool:

1. Download the official firmware for Redmi 9 (select Global or Russia region).
2. Unpack the archive in a folder without Cyrillic.
3. Install the Mi Flash Tool on your computer.
4. Transfer the phone to Fastboot mode (clip the power + volume reduction).
5. Connect the phone to your computer and in Mi Flash select a folder with firmware.
6. Press Flash and wait until it is completed (10-15 minutes).

Step 7: Protect Redmi 9 from future viruses

To avoid re-infection:

• 🔒 Disable the installation from unknown sources: Settings → Privacy → Special permits → Installation of unknown applications
• 🛡️ Update. MIUI Up to the latest version (new versions close vulnerabilities): Settings → The phone. → Updating the system
• 📱 Install a reliable antivirus (such as Malwarebytes) and set up a weekly scan.
• 🌐 Do not connect to public Wi-Fi without VPN (Viruses can be spread through networks).
• 🔍 Check the permissions of the applications: Settings → Annexes → Application management → [name] → Permissions (for example, why the messenger needs rights to the Internet) SMS geolocation?).

💡

The most common cause of infection is downloading hacked games (GTA, PUBG) or app mods. Even if the source seems reliable, use a sandbox (like the Shelter app) to test suspicious APKs.

FAQ: Frequent questions about virus removal with Xiaomi Redmi 9