How to completely remove Android Locker 179 from Xiaomi: 5 working methods

The Android Locker 179 virus is one of the most intrusive threats to Xiaomi smartphone owners, which blocks access to the system under the pretext of “security breach” or “unauthorized access.” SMS or USSD-The code, and the screen is completely paralyzed, you can't even open the settings menu. Unlike the classic ransomware banners, this virus masquerades as a system notification. MIUI, This makes it difficult to detect with antiviruses.

The main problem is that Android Locker 179 modifies /system/priv-app/ files and is prescribed to autoboot via init.d, so simply rebooting or deleting via Safe Mode doesn’t help. Moreover, on some Xiaomi models (such as the Redmi Note 10 Pro or POCO X3 Pro), the virus blocks access to ADB and Fastboot, making standard unlock methods useless. In this article, we will discuss 5 proven ways to remove the virus – from simple (for beginners) to radical (for advanced users), and explain how to recover data after cleaning.

1.What is Android Locker 179 and how does it get to Xiaomi

The Android Locker 179 virus belongs to the ransomware-locker family - it does not encrypt files, but blocks access to the system, imitating official Xiaomi notifications.

• 📱 Fake. APK-files downloaded from unofficial sources (e.g. modified versions of Google Play Market or pirated games).
• 🔗 Phishing links - in SMS, Telegram or WhatsApp with the suggestion to “update” MIUI" or "get a premium account".
• 📎 Mail attachments – files with the.apk or.xapk extension masquerading as documents (Account payment.pdf.apk).
• 🎮 Modified firmware - unofficial assemblies MIUI with a pre-installed virus (distributed on forums such as 4PDA).

The Locker 179 is characterized by the use of legitimate Xiaomi system permissions, such as:

• 🔒 android.permission.SYSTEM_ALERT_WINDOW — to display the blocking window over all applications.
• 📱 android.permission.BIND_DEVICE_ADMIN — to block removal through settings.
• 🔄 android.permission.RECEIVE_BOOT_COMPLETED — for auto-start after restart.

The virus can also mimic the Mi Cloud service by delivering a message like, "The device is locked at the request of Xiaomi Inc. (Error Code: 179). To unlock, send an SMS to +79XXXXXXXXXX with the text 'UNLOCK 179'." This is a scam - Xiaomi never blocks devices in this way!

2.The first steps: how to temporarily bypass the lock

Before you start removing the virus, try bypassing the lock to access the settings. These methods will not remove Locker 179, but will allow you to run an antivirus or back up your data.

Method 1: Safe Mode (Safe Mode)

On most Xiaomi models (except the Redmi 9A/9C and POCO M3), you can download to Safe Mode, where the virus is not active:

1. Press the power button until the shutdown menu appears.
2. Press and hold the "Switch Off" option (or "Reboot" on new versions of MIUI).
3. Confirm the download in Safe Mode (the inscription "Safe Mode" will appear at the bottom of the screen).

In this mode, try:

• 🛡️ Run an antivirus (Malwarebytes, Dr.Web or Kaspersky).
• 📱 Remove suspicious applications in Settings → Annexes.
• 🔄 Backup your data via Mi Cloud or Google Drive.

💡

If Safe Mode doesn’t start, try the combination: press the power + increase the volume for 10 seconds until the MI logo appears.

Method 2: Notifications bypass

On Xiaomi with MIUI 12/13, you can try to trick the virus through the notification panel:

1. Swipe your finger down from the top edge of the screen to open the notification curtain.
2. Click on Settings – sometimes it works even if the screen is locked.
3. Go to Applications → All applications and find suspicious ones (for example, “Security Service”, “System Update” with an unknown developer).

⚠️ Note: If the virus requests administrator rights (Settings) → Security → Administrators of the device, do not uncheck the tick from unknown applications - this can lead to a complete locking of the phone. ADB (section).

3. Removal via antivirus (if you have access to the system)

If you can bypass the lock (e.g., through Safe Mode), scan the device with an antivirus first, but standard apps like Google Play Protect or Mi Security often won’t detect Android Locker 179, as it uses legitimate system permissions.

We recommend the following tools:

Scanning instructions:

1. Install the selected antivirus through Google Play (if the block does not allow - download APK from the official site).
2. Start a full scan (not fast!).
3. If the antivirus finds threats with names like: Android.Trojan.Locker.179 HEUR:Trojan.AndroidOS.Locker.gen RiskWare.AndroidOS.FakeApp

Remove them and restart the device.

⚠️ If the antivirus is a threat to /system/priv-app/, But you can't remove them -- don't try to do it manually without rooting. This can lead to a bootloop. ADB (section 4).

4. Removal via ADB (for power users)

If the virus blocks access to settings and the antivirus does not help, the most reliable way is to use Android Debug Bridge (ADB), which requires a computer and enabled debugging over USB, but works even when the screen is completely locked.

Step 1: Preparation

You'll need:

• 🖥️ Computer with Windows/Linux/MacOS.
• 📋 USB-Type C Cable (Original, Not Cheap Chinese!).
• 🛠️ Utilities: ADB & Fastboot Tools by Google. Xiaomi Drivers for ADB.

Step 2: Enabling debugging over USB

The problem is that the virus often blocks access to Settings → About Phone.

1. Press the power + volume reduction for 10 seconds to reboot in Fastboot.
2. Connect your phone to your PC and type in the command line: fastboot oem edl This will put the device in EDL mode, where you can flash clean firmware (method 5). If the command does not work, move to the next step.
3. If you have a bootloader unlocked, try temporarily getting root through Magisk and disabling the virus manually.

Step 3: Removal of the virus through ADB

If USB debugging is enabled, follow the following commands:

1. Open the command prompt (cmd) in the ADB folder and type: adb devices Make sure the device is identified (its serial number should appear).
2. Get a list of packages: adb shell pm list packages -f | grep -i "lock\|security\|system" Look for suspicious names, e.g. com.android.system.lock com.xiaomi.security.fake com.qualcomm.179

adb shell pm uninstall -k --user 0 com.android.system.lock

(Replace com.android.system.lock with the name of the suspicious package)

adb reboot

Make sure the locking window is gone.|Check the list of applications for unknowns|Run the antivirus to re-scan|Update. MIUI last-minute-->

5. Radical method: firmware via Fastboot/EDL

If none of the previous methods worked, you can completely reflash the device, which will remove the virus guaranteed, but also erase all data (if there was no backup).

Step 1: Download the firmware

The official firmware for Xiaomi can be found on the websites: