Root access detected

[ras_oscar]

I just got a message this AM from Lookout that root access has been detected. I did not root my phone. The time stamp says it happened at 1:00 AM, when my phone was on, charging, and had access to wifi. How do I verify my phone actually has been rooted and this is not just lookout attempting to frighten me into buying a premium subscription? My carrier is ATT.

 

[El Presidente]

Power your device off, then hold volume down and power until it switches back on. It should take you to the bootloader screen, does it say "Unlocked", "S-OFF" or "Relocked" in the top left of the screen?

If no, reboot again, let the phone boot properly this time and look in your app drawer for a SuperSU or Magisk app.

Finally, download this - https://play.google.com/store/apps/details?id=com.joeykrim.rootcheck and it will give you a definitive yes or no.

 

[ras_oscar]

it says " locked" on the upper center of the boot screen. Rebooted normally, the 2 apps you named do not appear on my apps screen. I tried to DL the root checker but for some reason the wifi access point is disabled on my phone. I will try later from another access point.

 

[ras_oscar]

Installed rootchecker, it says root is NOT installed. Guess I can safely ignore this message?

 

[El Presidente]

Yeah, everything checks out. I think you can safely say the phone isn't rooted and Lookout is telling lies.

 

[Sandals]

I got the same message from lookout. My phone is a S8 plus. I tried what you suggested above & it doesn't show anything. Dont know if it's because i have diff. phone or carrier. My carrier is tmobile.

 

[Steve0701]

I suddenly got the rootkit detected message from Lookout on my 7-year old Nexus 7 tablet. Root Checker Basic says, "Sorry! Root access is not properly installed on this device." Properly? Does that mean I could have an improperly installed rootkit that is doing something?