Questions tagged [rkhunter]

Ask Question

Questions related to the rootkit-detection system `rkhunter`

58 questions
3 votes 0 answers 108 views

Rkhunter still relevant in 2022?

I tried using the RKHunter 1.4.6 () in Ubuntu20.04 , it is around 4 years old , running it did not find any ... user avatar rkte
  • 31
0 votes 1 answer 400 views

Possible that 2,3 week old os is infected? rkhunter, chkrootkit

Problem: Rootkit checks... Rootkits checked : 498 Possible rootkits: 5 /usr/bin/bsd-mailx [ Warning ] reinstalled, message keeps but now new: /usr/bin/lwp-... user avatar france1
  • 145
0 votes 1 answer 732 views

RKhunter Does Not Perform All Checks

Can someone tell me how to config / force rkhunter to check everything on my system? The checks are skipped, even if I run rkhunter --checkall Performing malware checks Checking running ... user avatar nightwatch
  • 370
1 vote 1 answer 251 views

Is rkhunter still required and appropriate? Nothing seems to have been written on it since 2015. Thanks

I want to use my Ubuntu 20.10 Groovy Gorilla desktop for internet banking and making purchases. Good digital hygiene is of course the first defence but i'd like to make sure that rootkits are ... user avatar Heafod
  • 57
0 votes 1 answer 145 views

rkhunter suspicious file type ecryptfs-user-Private text

Should I be concerned about this warning? Warning: Suspicious file types found in /dev: [18:17:04] /dev/shm/ecryptfs-user-Private: ASCII text I deleted the file, but when I rebooted it was recreated.... user avatar JUbunt2
  • 3
1 vote 0 answers 96 views

I get a "Warning" after adding the line APT_AUTOGEN="yes" to /etc/default/rkhunter with gedit [duplicate]

The warning is the following: "(gedit:38572): Tepl-WARNING **: 09:45:20.468: GVfs metadata is not supported. Fallback to TeplMetadataManager. Either GVfs is not correctly installed or GVfs metadata ... user avatar Neftali Adrian
  • 11
1 vote 0 answers 42 views

How to verify system file change warnings in rkhunter

When running rkhunter I try to use rkhunter --propupd when it is finished, but once in a while I forget, and the next time it is run I get the inevitable file changed warning for a few files. ... user avatar Peter LaNague
  • 11
1 vote 1 answer 2k views

Rkhunter shows 5 possible rootkits

Rkhunter shows 5 rootkits System checks summary File properties checks... Files checked: 149 Suspect files: 0 Rootkit checks... Rootkits checked : 480 Possible rootkits: 5 Applications checks... ... user avatar Abigael
  • 61
0 votes 0 answers 306 views

RKHunter gave me heaps of warnings

I ran a rkhunter search and i got these... [09:59:13] System checks summary [09:59:13] ===================== [09:59:13] [09:59:13] File properties checks... [09:59:13] Files checked: 149 [09:59:13] ... user avatar Anne Webster
  • 253
2 votes 1 answer 802 views

Baffling menu when installing RKHunter

Someone advised me to install a program called rkhunter for security. I've tried to do so, just using the apt command at the terminal, but am presented with a weird message about e-mail servers. I ... user avatar A. B.
  • 121
0 votes 1 answer 410 views

RKhunter possible false positive

Is /usr/bin/size being infected a false positive? However after I scanned the second time, it was no longer infected. I used the same command to scan using RKhunter sudo rkhunter -c twice and found it ... user avatar Godfrey
  • 27
2 votes 1 answer 3k views

rkhunter found 6 possible rootkits & how to remove them

hello i install rkhunter for first time and when i run rkhunter -c in result it came with 6 possible rootkit i wonder if these rootkits have are dangerous and if are how to remove them. ps: my pc has ... user avatar white0wl
  • 21
2 votes 1 answer 807 views

rkhunter shows a possible rootkit or a false possitive?

When I do an rkhunter --check it shows me that I have possible rootkits: /usr/bin/rkhunter: 14795: [: /usr/lib/firefox/firefox: unexpected operator /usr/bin/rkhunter: 14795: [: /usr/lib/firefox/... user avatar louiesanchezdj
  • 722
1 vote 0 answers 299 views

Rkhunter show me "warning"

Why rkhunter shows me a "warning" in /usr/bin/lwp-request? At the end of the dialog shows: Files properties checks... Files checked: 149 Suspect Files: 1 With ClamAV it ... user avatar louiesanchezdj
  • 722
6 votes 0 answers 4k views

Checking if SSH protocol v1 is allowed [closed]

I ran rkhunter -c on a server an the warning that i got was the following: Checking if SSH protocol v1 is allowed [ Warning ] Warning: The SSH configuration option 'Protocol' has not been set. ... user avatar Jacques Walker
  • 61

15 30 50 per page1234

You Might Also Like