️

How to Remove Hidden Adware, Malware, and Popup Apps on Android — Complete Guide

After analyzing multiple devices, I discovered that many pre-installed apps from OEMs like OPPO, Realme, Vivo, Xiaomi, and some ColorOS devices can secretly install hidden adware, malware, or persistent popup apps. These apps often have system-level privileges and sometimes enable the SYSTEM_ALERT_WINDOW permission, which allows them to show popups or run unwanted overlays.

Some identified malware/APKs include:

• Brokewell RAT — Remote access malware
• HiddenBot — Background spying
• NotyLife — Popups and adware

If you want to remove unwanted popups, adware, or suspicious APKs, here’s a step-by-step approach.

Step 1: Identify Suspicious Apps

Use ADB (Android Debug Bridge) to list apps with SYSTEM_ALERT_WINDOW permission:

adb shell cmd appops query-op SYSTEM_ALERT_WINDOW allow

Check for apps like:

• com.heytap.browser
• com.oplus.themestore
• com.nearme.gamecenter …and any app you don’t recognize.

Step 2: Temporarily Disable Apps

Before permanent removal, you can disable suspicious apps:

adb shell pm disable-user --user 0 com.heytap.browser
adb shell pm disable-user --user 0 com.oplus.themestore
adb shell pm disable-user --user 0 com.nearme.gamecenter

This stops them from running and showing popups.

Step 3: Permanently Uninstall Unwanted Apps

To completely remove bloatware or adware, use:

adb shell pm uninstall --user 0 com.heytap.browser
adb shell pm uninstall --user 0 com.oplus.themestore
adb shell pm uninstall --user 0 com.nearme.gamecenter

⚠️ Some apps may reappear after an OTA update or on factory reset. Keep a list of removed apps and repeat the process if needed.

Step 4: Audit Permissions

Even after removal, check for apps with SYSTEM_ALERT_WINDOW or suspicious permissions:

adb shell pm list packages -3
adb shell cmd appops query-op SYSTEM_ALERT_WINDOW allow

Remove or disable any new suspicious apps immediately.

Step 5: Use Clean ROMs or Custom Firmware (Optional)

For long-term protection against hidden malware and persistent bloatware, consider:

• Installing a clean stock ROM (official without extra OEM apps)
• Using custom ROMs like LineageOS or GrapheneOS
• Regularly auditing apps after OTA updates

Step 6: Future Protection Tips

1. Avoid installing unknown APKs outside trusted sources.
2. Regularly audit system apps for unexpected permissions.
3. Use ADB for advanced control of apps.
4. Monitor background apps using Android’s Developer Options.
5. Keep your OS updated but consider selective OTA updates if OEM pushes heavy bloatware.

Call to Action

If you’ve noticed any suspicious APKs or persistent popups, check your device with the above steps and share findings. Awareness is key because hidden adware and malware can compromise your privacy silently.

Stay vigilant. Stay secure.

#Nian0_0d4Y #AndroidSecurity #MobileSecurity #MalwareAnalysis #Adware #PenTesting #CyberSecurity #ADB #ThreatHunting