chkrootkit 0.35 is now available! This version includes:
* strings.c (thanks to Sean D. True)
* new tests: ldsopreload and lsof;
* new ports added to the bindshell test;
* new rootkits and trojans detected:
- RST.b trojan;
- duarawkz; (thanks to Leif Neland)
- knark LKM;
- HiDrootkit;
- Monkit;
- Bobkit; (thanks to m0xx)
- Pizdakit; (thanks to Kaveh Goudarzi)
- t0rn v8.0 (new variant). (thanks to Bob Grabowsky and Mihai Sandu)
chkrootkit is a tool to locally check for signs of a rootkit. More information about chkrootkit and rootkits can be found at
http://www.chkrootkit.org/.
The package was successfully tested on the following systems: Linux 2.0.x, 2.2.x and 2.4.x (any distribution), FreeBSD 2.2.x, 3.x and 4.x,
OpenBSD 2.6, 2.7, 2.8, 2.9 and 3.0, Solaris 2.5.1, 2.6 and 8.0.
chkrootkit's tarball and its MD5 checksum are available at:
ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.md5
or at the chkrootkit's homepage, at:
http://www.chkrootkit.org/
More info about rootkits can be found at:
http://www.chkrootkit.org/index.html#related_links
