Scan for Rootkits on Linux

Jza · Post by **Jza** » Fri May 19, 2006 11:13 pm

This is a nice tutorial at HowToForge on scanning for Rootkits.

# ./chrootkit -r /mnt/hda2_image

CptnObvious999 · Post by **CptnObvious999** » Sun May 21, 2006 1:16 pm

I prefer rkhunter because it doesn't give me false positives like chkrootkit does. But they both should serve their purpose just don't be surprised if chkrootkit says you have one and you didn't think you did. (Google is your friend)

snarkout · Post by **snarkout** » Sun May 21, 2006 3:14 pm

CptnObvious999 wrote:I prefer rkhunter because it doesn't give me false positives like chkrootkit does. But they both should serve their purpose just don't be surprised if chkrootkit says you have one and you didn't think you did. (Google is your friend)

++