Free tools Windows power users keep installed
One-click scans. No signup required.
If a Galaxy phone became slow, froze, or began showing advertisements after an app was installed, start with Samsung’s own tools rather than tapping a warning pop-up or downloading another “cleaner.” Connect to Wi‑Fi, restart the phone, run Settings > Device care > Diagnostics > App safety Diagnostics, and review any apps Samsung identifies as risks. Uninstall a flagged app from the results. If a particular app still seems responsible, remove it through Settings > Apps; if normal removal is blocked or the symptoms continue, use Safe mode to disable third-party apps while you uninstall it. Afterward, consider Settings > Security and privacy > Auto Blocker to restrict installations from unauthorized sources.
What to do first when a Galaxy phone looks infected
Do not trust an alarm that appears in a browser or inside an unfamiliar app and says your phone is infected, slow, or in urgent need of a download. Samsung warns that some apps use fake performance alerts to persuade you to install more software. Close the message if possible and work from the phone’s Settings app instead.
As an Amazon Associate I earn from qualifying purchases.
Samsung’s US troubleshooting guidance summarizes the safest starting point: “If you suspect a malicious app, use Device care to scan your phone for threats.” The built-in check can identify apps for review and may place detected apps in Deep sleeping apps. It is a useful diagnostic, not proof that every possible threat has been found.
- Connect the phone to Wi‑Fi.
- Restart the phone before running the diagnosis; Samsung says this can improve accuracy.
- Note which app was installed or updated shortly before the unwanted behavior began.
- Do not install an anti-malware app in response to a pop-up. Samsung’s malware guidance says it does not recommend third-party anti-malware products.
Menu names and the availability of individual options vary by Galaxy model, country or region, Android version, and One UI release. If a label is slightly different, look for the same Device care, Apps, Diagnostics, Security and privacy, or Auto Blocker category.
#1 Best Overall
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
You do not need to buy a scanner, cable, accessory, replacement part, or repair tool for this workflow. The documented steps use settings already on the phone. Keep the phone connected to power if the battery is low, but do not install software advertised by an alarming message simply because it claims to offer a faster fix.
Scan with App safety Diagnostics
Run the built-in check
- Open Settings.
- Tap Device care. On some models this may be called Battery and device care.
- Tap Diagnostics.
- Choose App safety Diagnostics.
- Allow the check to complete, then read the list under Apps to review if one appears.
Samsung recommends Wi‑Fi and a restart before this check. The diagnosis may not show a separate dramatic “virus found” screen. Instead, it can identify apps that warrant review or put them into a restricted, deep-sleep state. A notification from Device care may also appear; tapping it should take you to the apps Samsung wants you to examine.
If a Device care notification is already visible, tap it rather than searching through unrelated menus. Review the entries under Apps to review, select an app, and use Uninstall when Samsung offers that action. The exact notification wording and whether an app is immediately restricted can differ between Android versions. A detected app may be put into Deep sleeping apps to limit its activity while you decide what to do.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Remove an app Samsung flags
- In the diagnostic results or Device care notification, open Apps to review.
- Read the app name and package identity carefully. Make sure it is the app you recognize as suspicious, rather than a legitimate system component with a similar name.
- Tap Uninstall.
- Confirm the removal when Android asks.
- Restart the phone and check whether the original ads, freezing, or slowdown has stopped.
Samsung notes that behavior can differ by Android version. A detected app may first be limited by being placed in Deep sleeping apps, so check that list if an app seems to disappear from ordinary activity but the symptoms remain. Deep sleep is a restriction, not the same as deleting the app; use the uninstall action when it is offered.
Do not assume that every item in an alert is harmful solely because its name is unfamiliar. Compare the name, icon, and package identity with the app you remember installing. If the entry is a system component or a service you recognize, pause before removing it. The goal is to remove the app Samsung identified, not to delete system software at random.
What a clean result means
Device care and App safety Diagnostics can reveal harmful behavior known to Samsung’s protection service, but Samsung does not state that a clean result guarantees a phone is free of every threat. If the diagnosis finds nothing and the problem began after a particular installation, inspect that app manually. A clean scan and a suspicious symptom can coexist because the scan is one signal, not a complete forensic examination.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Slowness, freezing, and unwanted advertisements after installing a third-party app are all reasons to continue investigating even when no warning appears. The timing of the installation is useful evidence, but it is not conclusive by itself; remove the app only after checking that you have identified the correct entry.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Manually uninstall a suspicious app
Use Settings when the app was not flagged
Samsung specifically recommends manual removal when advertisements or abnormal behavior continue without a Device care alert.
- Open Settings.
- Tap Apps.
- Scroll through the list or use search to find the app that correlates with the problem.
- Tap the app’s entry and verify its name, icon, and identity.
- Tap Uninstall, then confirm.
Be precise before removing anything. An unfamiliar name is not automatically malicious, and deleting a system component can create a different problem. Concentrate on apps installed or updated immediately before the symptoms, apps you do not remember installing, or an app that matches the name shown in a Device care warning.
After uninstalling, restart and use the phone normally for a while. Check whether the same advertisements, freezes, or slowdown recur. If the problem disappears, that app is a strong candidate. If nothing changes, another recently added app may be involved, so make a short list of recent installations and work through it methodically.
If the Uninstall button is unavailable
A normal Settings page may not let you remove an app while it is active or while the phone is operating normally. Do not respond by installing a second scanner from an advertisement. Instead, continue with Safe mode below, where third-party apps are disabled and the suspected app can often be removed without its background process running.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If Settings shows only a disabled or missing uninstall control, first verify that you selected the downloaded app rather than a similarly named system service. If the behavior still prevents removal, Safe mode is the supported next route. Avoid repeatedly forcing the phone to shut down or deleting unrelated components.
Rank #3
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Remove the app in Safe mode
Why Safe mode helps
Samsung’s malware instructions describe Safe mode as a way to disable third-party apps temporarily. This isolates the software that was added after the phone left the factory and can make removal possible when a suspicious app keeps reopening, overlays other screens, or interferes with normal Settings use. Safe mode does not erase your personal data and does not permanently delete every third-party app; it is a troubleshooting state.
Safe mode is also a comparison test. If the phone behaves normally there, the cause is more likely to be an app that runs only during a regular startup. If the same problem remains in Safe mode, the suspected third-party app may not be the cause, or more than one issue may be present. Either result helps you choose the next app to inspect.
Enter Safe mode using Samsung’s US procedure
- Power the Galaxy phone off.
- Turn it on again.
- When the Samsung logo appears, press and hold Volume down.
- Keep holding it until the lock screen or home screen appears. “Safe mode” should be displayed on the screen.
Samsung cautions that the exact steps can vary by device. If this key sequence does not work on your model, use the model-specific power-menu instructions in Samsung’s support material rather than repeatedly forcing a shutdown.
Uninstall while Safe mode is active
- Open Settings.
- Tap Apps.
- Select the suspected third-party app.
- Tap Uninstall and confirm.
- Restart the phone normally to leave Safe mode.
Once the phone restarts normally, use it long enough to reproduce the original symptom. If the ads, freezing, or slowdown stop, the removed app was a strong candidate. If the symptom returns, another third-party app may be involved; repeat the same process for the most recent or least familiar additions rather than deleting system apps at random.
Normal uninstall or Safe mode? Choose the route that fits
| Situation | Recommended route | What to expect |
|---|---|---|
| Device care lists the app under Apps to review | Open the alert or App safety Diagnostics and tap Uninstall | Samsung has identified the app for review; the app may also be placed in Deep sleeping apps. |
| The app is suspicious but not flagged, and Settings works normally | Settings > Apps > select the app > Uninstall | Manual removal is the appropriate next step when symptoms correlate with a specific app. |
| The app will not uninstall or interferes with normal operation | Enter Safe mode, then use Settings > Apps to uninstall | Third-party apps are disabled temporarily, making isolation and removal easier. |
| The phone behaves normally in Safe mode but problems return after a normal restart | Remove the recently installed or least familiar third-party apps one at a time | The continuing symptom points to software that runs only when third-party apps are enabled. |
The table describes two removal methods, not two competing scanners. Samsung’s guidance supports Device care and Safe mode; it does not recommend replacing them with a third-party anti-malware product.
Turn on Auto Blocker after cleanup
Enable the standard protection
- Open Settings.
- Tap Security and privacy.
- Tap Auto Blocker.
- Turn the feature on and review the confirmation.
Samsung says Auto Blocker can block app installations from unauthorized sources. This reduces the chance that an app installed outside an approved channel will be added without your knowledge. Availability depends on the phone’s software version and device.
Rank #4
- STAY PROTECTED EVERYWHERE you go, at home, in a café, at the airport—everywhere—on ALL YOUR DEVICES, with cloud-based protection against viruses & other online threats
- Webroot PASSWORD MANAGER by Last Pass creates, encrypts, and saves all your passwords, so you only have to remember one.
- As the #1 TRUSTED PROVIDER OF THREAT INTELLIGENCE, you know you’re in good hands. Stay safe from viruses, ransomware, phishing, and more.
- Webroot SOFTWARE UPDATES ITSELF AUTOMATICALLY, so you always have the most current protection without lifting a finger—and updates happen in the background so they won’t slow you down.
- PREMIUM FEATURES: Encrypts & protects passwords and account information for all your devices so you can stay protected wherever you are.
Auto Blocker is preventive, not a scanner and not an uninstall tool. Turn it on after removing the suspect app, and continue to review installation prompts carefully. If you intentionally use software from outside an authorized source, understand that enabling the feature may prevent that installation.
Understand Maximum restrictions
Some Galaxy phones offer a stronger Maximum restrictions setting within Auto Blocker. It adds security controls, but Samsung warns that the extra restrictions can limit certain functions. Use it when the additional protection fits how you install and use apps; if a legitimate workflow stops working, revisit Auto Blocker and adjust the setting rather than downloading an alternative security app from an advertisement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When the problem continues after removal
Run the diagnosis again
Restart the phone, reconnect to Wi‑Fi, and run App safety Diagnostics a second time. Review Apps to review and Deep sleeping apps. The second pass can show whether another app has become the source of the behavior or whether the original app was only one part of the problem.
Keep a simple record of which app you removed and when the symptom changed. This prevents repeatedly removing the same legitimate app and makes it easier to explain the behavior to Samsung support if the documented paths fail.
Check the symptom, not just the scan label
- Advertisements continue: identify which app was installed immediately before they appeared and inspect it under Settings > Apps, even if the scan was clean.
- Slowness or freezing continues: test the phone after Safe mode removal. If it works in Safe mode but not normally, a remaining third-party app is still a likely cause.
- An app reappears: enable Auto Blocker and avoid reinstalling software from an unauthorized source.
- A warning asks you to download another app: do not tap the recommendation. Return to Settings and use Device care or App safety Diagnostics.
Know what the built-in tools do not establish
Samsung’s support pages describe detection of harmful behavior, app review lists, deep sleeping, and removal paths. They do not claim that a clean Device care result proves the absence of every malicious program. Treat persistent symptoms as a reason to continue isolating recently added apps and to seek Samsung support for the specific model if the documented removal paths fail.
Recommended Free Tools
There is no official percentage or score that translates a clean result into a guarantee. The meaningful checks are whether the suspicious app is gone, whether the phone behaves normally after a regular restart, and whether the unwanted installation path has been restricted.
Best Value
- Android Security & protection
- Daily Virus Database checkup and updates
- Scan Apps and Files
- System Cleaner Integrated
- Virtual Private Network (VPN)
Common mistakes to avoid
- Installing a “phone booster” from an alert: fake slow-phone or battery-drain messages can be designed to make you install more software.
- Assuming an unflagged app is safe: manual removal through Settings > Apps remains appropriate when the timing and behavior point to that app.
- Deleting system software indiscriminately: verify the app’s identity before tapping Uninstall.
- Leaving Safe mode enabled: restart normally after uninstalling so the phone returns to its regular operating state.
- Treating Auto Blocker as a cure: it helps prevent unauthorized installations; it does not remove an app that is already present.
- Expecting a scan to be a guarantee: use the result with the phone’s symptoms and installation history, not as the only evidence.
- Assuming every Galaxy has identical menus: model, market, Android version, and software release can change names and availability.
- Adding a third-party anti-malware app by default: Samsung’s US malware guidance specifically advises against third-party anti-malware products.
A practical decision sequence
- Ignore suspicious pop-ups and do not install the software they advertise.
- Connect to Wi‑Fi and restart the Galaxy phone.
- Run Settings > Device care > Diagnostics > App safety Diagnostics.
- If Samsung lists an app under Apps to review, inspect it and tap Uninstall.
- If no app is flagged, manually inspect the app most closely linked to the symptoms at Settings > Apps and uninstall it.
- If normal uninstall is blocked, enter Safe mode, remove the third-party app through Settings, and restart normally.
- Run the diagnosis again and observe the phone during ordinary use.
- Enable Settings > Security and privacy > Auto Blocker; consider Maximum restrictions only if its limitations fit your needs.
This sequence follows Samsung’s documented Device care, manual uninstall, Safe mode, and Auto Blocker paths while recognizing that menu labels and behavior vary among Galaxy devices and software versions.
Frequently Asked Questions
Does a clean App safety Diagnostics result prove my Galaxy phone has no malware?
No. Samsung presents the check as a way to identify apps for review and harmful behavior, not as a guarantee that every threat has been found. If symptoms continue, manually inspect recently installed or updated apps and use Safe mode to isolate them.
What should I do if Samsung does not flag the suspicious app?
Use Settings > Apps, select the app that matches the timing and symptoms, verify its identity, and tap Uninstall. Samsung recommends manual removal when ads or abnormal behavior continue without a Device care alert.
How do I remove an app that will not uninstall normally?
Restart into Safe mode, where third-party apps are disabled. Then open Settings > Apps, select the suspected app, tap Uninstall, and restart normally afterward. Safe-mode entry steps vary by Galaxy model.
Should I install a separate antivirus or phone-cleaner app?
Samsung’s US malware guidance says it does not recommend third-party anti-malware products. Use Device care and App safety Diagnostics instead, and never install a scanner promoted by a suspicious pop-up.
What does Auto Blocker do after I remove the app?
Auto Blocker can block installations from unauthorized sources, reducing the chance of another unwanted installation. It does not remove an app already on the phone, and Maximum restrictions may limit some legitimate functions.
Why are the menu names different on my Galaxy phone?
Samsung says options vary by model, market, Android version, and software release. Look for the equivalent Device care, Diagnostics, Apps, Security and privacy, and Auto Blocker categories.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →The Bottom Line
Use Samsung’s built-in Device care and App safety Diagnostics first, uninstall flagged or manually identified apps through Settings, and switch to Safe mode when normal removal is blocked. Restart and test the phone afterward, then enable Auto Blocker to reduce unauthorized installations. A clean scan is useful evidence, but it is not a guarantee that every threat is absent.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
