You saw a βFinded 1 Threatβ notification on a Xiaomi smartphone screen and you donβt know what to do next? Donβt panic β 90% of the time itβs not a critical problem, but a standard warning from the built-in Mi Security antivirus. But you canβt ignore it either: even βharmlessβ threats can slow down your phone, show annoying ads or steal data in the background.
In this article, we will analyze the step-by-step algorithm for cleaning a smartphone from viruses using Xiaomiβs regular tools, explain what types of threats are and why they appear, and give recommendations on how to avoid re-infection.
What does the βFound 1 Threatβ message mean on Xiaomi?
A threat message is detected when the embedded Mi Security antivirus (or Security Scan in global firmware) detects a suspicious file, application, or activity.
- π¦ Adware β programs that show ads outside of apps (pop-up banners, notifications).
- π΅οΈ Spyware β collects data about your actions (logins, browser history, geolocation).
- π£ Trojans β masquerading as legitimate files but performing malicious actions (e.g. sending them) SMS pay-per-room).
- π Phishing links β redirected to fraudulent sites (often via SMS messenger).
In most cases, Xiaomi blocks the threat automatically, but sometimes manual removal is required, such as if the virus has penetrated system folders or masquerades as a system application (for example, com.android.system).
β οΈ If the antivirus finds a threat to the name Android/Trojan.Dropper or RiskWare, it can be a false positive on pirated applications (hacked games, modified games) APK). Delete these files only if you are sure of their origin.
Step-by-step: how to eliminate the threat through antivirus Xiaomi
Follow this algorithm to clear your smartphone of the virus without losing data:
- Open antivirus: Go to Settings β Applications β Security β Scan (or Security β Scan in global firmware). On some models (Redmi Note 12, POCO X5), the path may be different: use the search by settings (the magnifying icon at the top).
- Run deep scan: Click Full Check (not fast!) This will take 5-10 minutes, but check all files, including system ones. If the battery is under 20%, plug in charging - a scan interruption may miss threats.
- Delete the threats you find: After scanning, the antivirus will show you a list of threats. Click "Delete" or "Clear" next to each item. If the button is inactive, the file is locked, move to the next step.
- Check Administrator Rights: Some viruses gain device administrator rights, which prevents them from being deleted. Go to Settings β Passwords & Security β Device Administrators and disable suspicious applications (such as Device Manager or System Update names).
Check administrator permissions for suspicious apps |Reboot your phone in safe mode |Remove the Xiaomi Antivirus cache |Renew the signature database manually (in the antivirus settings)
-->
If the threat appears again after deleting, it means that the virus is restored from the backup or the system file is infected, in which case only a factory reset will help (instruction below).
How to clean Xiaomi from viruses if the antivirus does not help?
If the Mi Security antivirus does not work, use these methods:
| Method | When to apply | Risks. |
|---|---|---|
| Safe regime | Virus blocks removal or interferes with phone operation | Temporary disabling of third-party applications |
| Reset to factory settings | Threat returns after removal | Data loss (do backup!) |
| Third-party antivirus (for example, Malwarebytes) | Built-in antivirus does not detect a threat | False positives on legitimate files |
| Manual cleaning through ADB | Virus in system folders (for experienced users) | Can damage the system if you make an error |
Instructions for safe mode:
- Press the power button before the off menu appears.
- Hold your finger on the "Switch off" item - a suggestion will appear to go to safe mode.
- In Safe Mode, remove suspicious apps through Settings β Apps.
- Reboot the phone.
How to reset Xiaomi to factory settings without losing data?
For advanced users: If the virus is in the system folder (e.g. /system/priv-app), it can be removed via ADB. Connect your phone to your PC, enable debugging over USB, and follow the command:
adb shell
su
rm -rf /path/to/virus.apkBe careful β a team error can damage the system.
Where do Xiaomi viruses come from and how do you avoid them?
The main sources of infection:
- π± Third-party APK-files not downloaded from Google Play (pirate games, modified applications).
- π Phishing links - in SMS, Messengers (WhatsApp, Telegram) or social networks.
- π Malware attachments β files with extensions.apk,.xapk,.zip from unknown senders.
- π System vulnerabilities β if you donβt update your firmware, hackers can exploit old flaws.
How to defend yourself:
- π Set the installation lock from unknown sources: Settings β Annexes β Special access β Installation of unknown applications.
- π‘οΈ Regularly update the firmware: Settings β The phone. β Updating the system.
- π₯ Don't download. APK from dubious sites (e.g. apkpure.com, uptodown.com) β often distribute modified files).
Google Play|APKMirror| Official Xiaomi|Doubtful sources (torrents, forums)|Other
-->
β οΈ Warning: Viruses are often disguised as popular apps (such as WhatsApp Gold, GBWhatsApp or Modded Spotify). Even if they are not detected by antivirus, they can steal data. Check reviews and ratings before installing!
What if Xiaomi is slow after the virus is removed?
Viruses often leave behind "junk" -- temporary files, cache, background processes -- to get the phone back to normal.
- Clear the cache: Go to Settings β Storage β Clean up and select App Cache. This will delete unnecessary data without losing personal files.
- Turn off autoboot: Many viruses add themselves to autoboot. Check the list in Settings β Battery β Autostart and disable suspicious apps.
- Check battery consumption: If the phone still runs out quickly after removing the virus, open Settings β Battery β Battery Use. Apps with abnormal consumption (e.g. 30% in 1 hour) can be hidden threats.
-->
If the problem persists, try rolling back the system to the previous firmware version (if the virus appeared after the update).
- Download the old firmware version for your model from the Xiaomi Firmware website.
- Go to Settings β About Phone β System Update β Three Dots β Select a firmware file.
- Select the downloaded file and wait for the process to be completed.
Top.-5 User errors when removing viruses on Xiaomi
Many users make the problem worse by trying to fix the phone in the wrong way.
- Install antiviruses from advertising: Applications like Clean Master, DU Speed Booster or Virus Cleaner often contain advertising software themselves. Use only proven solutions: Malwarebytes, Bitdefender or built-in Mi Security.
- Ignore updates: Many viruses exploit vulnerabilities in older versions of Android. For example, the Pegasus threat spread through a flaw in MIUI 12.5, which was closed in MIUI 13.
- Reset settings without backup: When resetting to factory settings, you will lose photos, contacts and messages if you don't back up. Use Settings β Google β Backup or Xiaomi Cloud.
- Delete system files manually: Files in /system or /vendor folders are critical to the phone's operation. Deletion of them can cause a device to "break down."
- Connect to public Wi-Fi without VPN: In open networks (cafes, airports), hackers can intercept traffic and install viruses through vulnerabilities in the browser. VPN or ProtonVPN.
-->