Ask Question

Questions related to the rootkit-detection system `rkhunter`

58 questions

3votes0answers108views

Rkhunter still relevant in 2022?

I tried using the RKHunter 1.4.6 () in Ubuntu20.04 , it is around 4 years old , running it did not find any ... user avatar rkte

  • 31
0votes1answer400views

Possible that 2,3 week old os is infected? rkhunter, chkrootkit

Problem: Rootkit checks... Rootkits checked : 498 Possible rootkits: 5 /usr/bin/bsd-mailx [ Warning ] reinstalled, message keeps but now new: /usr/bin/lwp-... user avatar france1

  • 145
0votes1answer732views

RKhunter Does Not Perform All Checks

Can someone tell me how to config / force rkhunter to check everything on my system? The checks are skipped, even if I run rkhunter --checkall Performing malware checks Checking running ... user avatar nightwatch

  • 370
1vote1answer251views

Is rkhunter still required and appropriate? Nothing seems to have been written on it since 2015. Thanks

I want to use my Ubuntu 20.10 Groovy Gorilla desktop for internet banking and making purchases. Good digital hygiene is of course the first defence but i'd like to make sure that rootkits are ... user avatar Heafod

  • 57
0votes1answer145views

rkhunter suspicious file type ecryptfs-user-Private text

Should I be concerned about this warning? Warning: Suspicious file types found in /dev: [18:17:04] /dev/shm/ecryptfs-user-Private: ASCII text I deleted the file, but when I rebooted it was recreated.... user avatar JUbunt2

  • 3
1vote0answers96views

I get a "Warning" after adding the line APT_AUTOGEN="yes" to /etc/default/rkhunter with gedit [duplicate]

The warning is the following: "(gedit:38572): Tepl-WARNING **: 09:45:20.468: GVfs metadata is not supported. Fallback to TeplMetadataManager. Either GVfs is not correctly installed or GVfs metadata ... user avatar Neftali Adrian

  • 11
1vote0answers42views

How to verify system file change warnings in rkhunter

When running rkhunter I try to use rkhunter --propupd when it is finished, but once in a while I forget, and the next time it is run I get the inevitable file changed warning for a few files. ... user avatar Peter LaNague

  • 11
1vote1answer2kviews

Rkhunter shows 5 possible rootkits

Rkhunter shows 5 rootkits System checks summary File properties checks... Files checked: 149 Suspect files: 0 Rootkit checks... Rootkits checked : 480 Possible rootkits: 5 Applications checks... ... user avatar Abigael

  • 61
0votes0answers306views

RKHunter gave me heaps of warnings

I ran a rkhunter search and i got these... [09:59:13] System checks summary [09:59:13] ===================== [09:59:13] [09:59:13] File properties checks... [09:59:13] Files checked: 149 [09:59:13] ... user avatar Anne Webster

  • 253
2votes1answer802views

Baffling menu when installing RKHunter

Someone advised me to install a program called rkhunter for security. I've tried to do so, just using the apt command at the terminal, but am presented with a weird message about e-mail servers. I ... user avatar A. B.

  • 121
0votes1answer410views

RKhunter possible false positive

Is /usr/bin/size being infected a false positive? However after I scanned the second time, it was no longer infected. I used the same command to scan using RKhunter sudo rkhunter -c twice and found it ... user avatar Godfrey

  • 27
2votes1answer3kviews

rkhunter found 6 possible rootkits & how to remove them

hello i install rkhunter for first time and when i run rkhunter -c in result it came with 6 possible rootkit i wonder if these rootkits have are dangerous and if are how to remove them. ps: my pc has ... user avatar white0wl

  • 21
2votes1answer807views

rkhunter shows a possible rootkit or a false possitive?

When I do an rkhunter --check it shows me that I have possible rootkits: /usr/bin/rkhunter: 14795: [: /usr/lib/firefox/firefox: unexpected operator /usr/bin/rkhunter: 14795: [: /usr/lib/firefox/... user avatar louiesanchezdj

  • 722
1vote0answers299views

Rkhunter show me "warning"

Why rkhunter shows me a "warning" in /usr/bin/lwp-request? At the end of the dialog shows: Files properties checks... Files checked: 149 Suspect Files: 1 With ClamAV it ... user avatar louiesanchezdj

  • 722
6votes0answers4kviews

Checking if SSH protocol v1 is allowed [closed]

I ran rkhunter -c on a server an the warning that i got was the following: Checking if SSH protocol v1 is allowed [ Warning ] Warning: The SSH configuration option 'Protocol' has not been set. ... user avatar Jacques Walker

  • 61

153050per page

1 2 3 4