Viruses on Xiaomi smartphones are a much more common problem than you think, even if you don't download suspicious ones. APK-files, malware can penetrate through banner ads, phishing sites or vulnerabilities in MIUI. The main danger: most viruses masquerade as system processes, consume battery resources and steal data - from browser history to bank details.
In this article, 6 working methods for virus removal for all Xiaomi models (including Redmi Note 12, POCO X5, Mi 11, etc.), from simple scans to radical measures like factory resets. We will also discuss how to recognize an infected phone by indirect signs and why standard antiviruses are often useless against built-in MIUI Trojans distributed through theme updates and branded applications.
Signs of Xiaomi phone infection with a virus
The first thing you need to do is confirm the presence of the virus, and many of the symptoms are consistent with normal MIUI failures, but there are key markers:
- π The battery is discharged for 3-4 hours without active use (check in Settings) β Battery β if there are unknown processes with consumption >10%, it's a wake-up call).
- π± Spontaneous reboots, especially when connected to Wi-Fi or mobile network.
- π° SMS to short numbers or write-offs (viruses like Trojan-SMS send payments without your knowledge).
- π Unknown apps in the menu or in the list of installed programs (check in Settings) β Annexes β Application management).
- π Advertising in system notifications or redirecting the browser to strange sites.
Viruses that masquerade as system services (e.g. com.android.system or com.miui.analytics) are particularly dangerous, and cannot be removed by standard methods, requiring manual cleaning or resetting.
β οΈ Note: If the phone started to warm up without load and in Settings β The phone. β The condition appears a warning about "system damage" - it may not be a virus, but a hardware malfunction (for example, a bloated battery.
Method 1: Scanning with built-in MIUI antivirus
MIUI has a built-in security scanner that detects most common threats.
- Open the Security app (shield icon).
- Go to the Antivirus tab.
- Click Scan and wait until it is completed (usually 2-5 minutes).
- If threats are found, click Delete All or Treat.
However, this method has limitations:
- β Does not detect rootkits or viruses embedded in system files.
- β Often skips adware if it is signed with a Xiaomi digital certificate.
- β Doesn't scan files in folders. /system and /data rootless.
π‘
If the built-in antivirus finds threats but canβt remove them, try restarting your phone in Safe Mode (press the power button β long press on βStopβ β βSafe Modeβ) and repeat the scan.
Method 2: Removing viruses through Safe Mode
Safe mode only downloads system applications, blocking all third-party (including viruses) and allows you to remove malware that normally interferes with the phone.
How to Sign In to Safe Mode on Xiaomi:
- Press the power button before the off menu appears.
- Long click on the option to turn off (the offer will appear to go to safe mode).
- Confirm the login. The phone will reboot with Safe Mode at the bottom of the screen.
Next:
- π Check the list of installed applications (Settings) β Annexes) for suspicious.
- ποΈ Uninstall unknown programs (especially those with names like System Update, Flash Player, Cleaner Pro).
- π Restart your phone in normal mode.
β οΈ Note: Some viruses (e.g., Triada) can recover from deletion if they are embedded in system libraries, in which case only a complete reset or flashing will help.
Method 3: Manually remove viruses via ADB (for advanced)
If a virus has blocked access to settings or masquerades as a system application, it can be removed via ADB (Android Debug Bridge), a method that requires a computer and basic command-line knowledge.
Instructions:
- Turn on USB Debugging on your phone: Settings β About Phone β MIUI Version (click 7 times to become a developer) β Return to Settings β Additional β For Developers β Enable Debugging.
- Connect your phone to your PC and install ADB Tools.
- Open the command line (Windows) or the terminal (Mac/Linux) and type:
adb devices(device to appear)
adb shell pm list packages -f(Shows a list of all packages installed)
adb shell pm uninstall -k --user 0 name.packet(Replace the name.packet with a suspicious package, such as com.android.fakeupdate)
Typical virus package names to look for:
| Type of virus | Examples of packet names | What's he doing? |
|---|---|---|
| Adware | com.duapps.ad, com.miui.analytics.fake | Shows ads in notifications |
| Trojan-SMS | com.android.smssender, ru.credit.sms | Sending paid SMS |
| Spyware | com.system.spytrack, com.monitor.key | Stealing input data. |
| Ransomware | com.filecoder, com.lockscreen | Locks the screen. |
How to find hidden virus packets?
Method 4: Reset to factory settings (last chance)
If the virus is deeply embedded and other methods fail, it's a complete reset, and it will delete all the data from the phone, so first:
Backup photos and contacts | Record usernames/passwords from accounts | Make sure you know the data from Mi-account (without them, the phone will be blocked after reset) | Take out the memory card (it is also worth formatting)
-->
Resetting instructions:
- Go to Settings β About the phone β Reset settings.
- Select Delete all data.
- Enter the Mi-account password if required.
- Confirm the reset. The phone will restart and start the process (it will take 5-15 minutes).
After discharge:
- π Do not restore data from a backup made after infection - the virus may return.
- π Update immediately. MIUI Up to the latest version (Settings) β Updating the system).
- π‘οΈ Install a reliable antivirus (e.g. Bitdefender or Kaspersky).
β οΈ Note: Some Xiaomi models (e.g. Redmi) 9A) You may need to re-activate it after reset via Mi-account, and if you forget your password, restore it before reset, otherwise the phone will turn into a brick".
π‘
Resetting to factory settings removes viruses by 100%, but only if they have not been embedded in the recovery partition, in which case only flashing through Fastboot will help.
Method 5: Fastboot Flashing (for experienced ones)
If the virus survived the reset, it could damage system files, in which case a full Fastboot flashing would help, a method that requires a computer and official firmware from Xiaomi.
Step-by-step:
- Download the official firmware for your model from the MIUI Download website (choose the Fastboot version).
- Unpack the archive in a folder on your PC.
- Turn off the phone and press Volume Down + Power to enter the Fastboot (a rabbit will appear with the inscription Fastboot).
- Connect your phone to your PC and launch the file flash_all.bat (Windows or flash_all.sh (Mac/Linux) firmware.
It'll take 5-10 minutes. Once you flash it, it'll look like new, but:
- β οΈ All data will be erased (including internal memory).
- β οΈ If the phone was unlocked through Bootloader Unlock, it can lock again after firmware.
This method is guaranteed to remove even the most persistent viruses, but it is only suitable for users with experience.
Method 6: Protection against re-infection
Removing the virus is half the battle, so you can keep it from coming back, and you can follow these rules.
- π Disable the installation from unknown sources: Settings β Annexes β Special permits β Installation of unknown applications.
- π‘οΈ Use antivirus with real protection (not built-in) MIUI). Good options:
- π Update regularly MIUI β New versions are closing vulnerabilities.
- π Do not use pirated applications (especially modified games or hacked versions of paid programs).
- π₯ Check the files before downloading on VirusTotal.
Pay special attention to phishing sites masquerading as official Xiaomi resources. For example, scammers send links to "MIUI update" or "gift promotions" that actually install viruses. All official updates come only through Settings β System Update!