Discover Rootkits With Unhide

[ Thanks to An Anonymous Reader for this link. ]

"The unhide utility is available, at least, on recent releases of Debian and Ubuntu. The Ruby script is available on Launchpad, but it's not available in any of the recent releases yet. I'd recommend grabbing both -- the legacy utility seems prone to false positives. It may still be useful, but I'd have both just in case. It's also unclear whether it's still under development -- the site for the utility 404s now. Both are open source software, of course."

Complete Story

Related Stories:

• Hunting Rootkits with rkhunter Video Tutorial(Dec 23, 2009)
• HookSafe Protects Kernel from Rootkits(Nov 13, 2009)
• New Attack Sneaks Rootkits Into Linux Kernel(Apr 15, 2009)
• With Linux, Even Rootkits Are Open Source(Sep 10, 2008)
• Open Source Release Takes Linux Rootkits Mainstream(Sep 05, 2008)
• Linux Detecting/Checking Rootkits with Chkrootkit and rkhunter Software(Jan 29, 2008)
• All About Linux: Various Ways of Detecting Rootkits in GNU/Linux(Dec 19, 2006)