I have a new Samsung Galaxy A3 that keeps on giving me a security notice saying

Unauthorized actions have been detected. Restart your phone to undo any unauthorized changes.

How do I stop receiving these notices?


Direct-copy from Samsung Knox official support:

My device displayed the notification: “Unauthorized actions have been detected. Restart your phone to undo any unauthorized changes.” What do I do?

During regular security checks of the Linux kernel, the system has detected that the kernel has been modified. Possible causes:

  • You may have installed a malicious or flawed app, which attempted to modify the kernel code or file system
  • You may have accidentally removed or modified a system file.

One of these messages will appear: "To protect your device. It is recommended you reboot." or "The device has detected an application attempting to perform actions that are not permitted. It is recommended that you restart your device."

Restart your device to try to restore the kernel code back to normal. However, some kernel modifications made to the file system cannot be restored. Also, the original cause of the problem might still persist. Therefore, you might continue to see this error after the reboot.

If issues continue to persist, contact the Global Customer Support center and provide details of the error.

It's suggested that restarting the device may fix the issue, but not always (and since you mentioned "keeps on", it seems this didn't fix the issue). So, you have some alternatives:

  1. Contact their customer support and explain it (as recommended by Samsung)
  2. If your device is still under warranty (assuming you really didn't do anything to the device), consider to request for device replacement.
  3. If there is no other choice, try doing factory reset and see if it helps. Otherwise, you might need to reflash it with stock ROM & working kernel.
|improve this answer|||||

Often it's because you have a rooted phone and you have granted access to some application to mess with root files KNOX are protecting, such as the kernel. My idea is that system apps can with change root files without problem.

What did to fix it:

  1. SuperSU -> setting -> clear log
  2. Install SuperSU to /system using the settings option
|improve this answer|||||

Not the answer you're looking for? Browse other questions tagged or ask your own question.