Install ChkRootKit

Install ChkRootKit

chkrootkit (Check Rootkit) is a common Unix-based program intended to help system administrators check their system for known rootkits. It is a shell script using common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures and for comparing a traversalof the /proc filesystem with the output of the ps (process status) command to look for discrepancies

There are inherent limitations to the reliability of any program that attempts to detect compromises (such as rootkits and computer viruses). Newer rootkits may specifically attempt to detect and compromise copies of the chkrootkit programs or take other measures to evade detection by them.

Follow these steps to install ChkRootKit

cd /usr/local/src/

– Down load the chkrootkit.
# wget

– Unpack the chkrootkit you just downloaded.
# tar -xvzf chkrootkit.tar.gz

– Change to new directory
# cd chkrootkit-*
(select the version )

– Compile chkrootkit
# make sense

– Run chkrootkit
# ./chkrootkit

How to setup a daily scan report?

– Load crontab
# crontab -e

– Add this line to the top:
0 1 * * * (cd /usr/local/src/chkrootkit*; ./chkrootkit 2>&1 | mail -s “chkrootkit output”


10 thoughts on “Install ChkRootKit

  1. I just want to say I’m all new to weblog and actually enjoyed you’re blog. More than likely I’m planning to bookmark your website . You actually come with remarkable well written articles. Kudos for revealing your blog site.

  2. The Murdoch family have definitely a lot to celebrate in terms of their health. After developing rheumatoid arthritis in 2007, chartered accountant Bill Murdoch turned to food as a means of comfort when matching in his local Territorial Army marching band was no longer possible.

  3. Very couple of websites that take place to become comprehensive below, from our point of view are undoubtedly nicely really worth checking out.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s