LinuxQuestions.org

Rootkit Hunter: Revision 1.533

Posted 06-26-2015 at 05:46 PM by unSpawn
Updated 06-26-2015 at 05:47 PM by unSpawn

Revision 1.533 belatedly adds support for "XOR.DDoS", please see this SANS ISC diary for details. Please get this revision via http://rkhunter.cvs.sourceforge.net/...nter/?view=tar .

unSpawn

Moderator

Posted in Uncategorized

Views 734 Comments 0 unSpawn is offline

Rootkit Hunter release 1.4.2

Posted 02-24-2014 at 01:26 PM by unSpawn

Tags rootkit hunter

The Rootkit Hunter project team is pleased to announce the release of version 1.4.2.
Please see the rkhunter-1.4.2 download page for details.

unSpawn

Moderator

Posted in Uncategorized

Views 1100 Comments 0 unSpawn is offline

Rootkit Hunter reissue of 1.4.0 release (ALLOWDEVFILE)

Posted 05-01-2012 at 11:02 AM by unSpawn

Tags rootkit hunter

Please note we've found an error with usage of exclamation points in an ALLOWDEVFILE check.
We have corrected this and have reissued 1.4.0.

NEW RELEASE SHA1: 48798beec504c00af93bf64b6e35dfc7d7aaff07
old release SHA1: 22546370647b79abce783d2a2d29352843d1b617

Apologies for the inconvenience,
unSpawn
---

unSpawn

Moderator

Posted in Uncategorized

Views 1257 Comments 0 unSpawn is offline

Rootkit Hunter release 1.4.0

Posted 04-30-2012 at 07:11 PM by unSpawn
Updated 04-30-2012 at 07:12 PM by unSpawn

Tags rootkit hunter

Rootkit Hunter 1.4.0 release is here thanks to John Horne and all contributors who provided code, submitted ideas, bugs, fixes, documentation, helped out on the rkhunter-users mailing list and promoted Rootkit Hunter.

New:

- Added the '--list propfiles' command-line option. This will dump out the list of filenames that will be searched for when building the file properties database. By default the list is not shown if just '--list' is used.
- Added Jynx rootkit...

unSpawn

Moderator

Posted in Uncategorized

Views 1189 Comments 0 unSpawn is offline

Rootkit Hunter alternative for suspscan

Posted 07-25-2011 at 06:16 PM by unSpawn

Tags clamav, maldetect, rootkit hunter, suspscan

I've been mulling (yes, mulling) replacements for RKH's suspscan for a while now. Suspscan was an experiment to see if there could be a more generic, less name-based way of finding malware. The resultant monstrosity is resource-intensive, impossible to configurable and rarely used. Researching something else (as usual) I came across this rather good presentation (PDF) about creating ones own AV signatures: Writing ClamAV Signatures and not long after that I found R-fx Networks' Linux Malware Detect....

unSpawn

Moderator

Posted in Uncategorized

Views 1660 Comments 0 unSpawn is offline

Page 1 of 4

Last »