Comments on: 5 Tools to Scan a Linux Server for Malware and Rootkits

By: Brian Spaeth

Brian Spaeth — Wed, 27 Jul 2022 08:50:57 +0000

What does it mean when ClamAV doesn’t find any infections but reports many errors?

By: KJ

KJ — Mon, 03 May 2021 14:56:58 +0000

None of the commands is doing anything.

By: Jackson

Jackson — Mon, 05 Apr 2021 13:44:12 +0000

Update for those reading this years later.

The cron job for rkhunter won’t work. It will get stuck waiting for someone to hit enter on the keyboard.

The correct cronjob would be:

30 4 * * * /usr/bin/rkhunter --cronjob --propupd

This will make the job run at 4:30 AM and you can view the log at /var/log/rkhunter.log

If you want emails sent to you edit the following line in /etc/rkhunter.conf:

MAIL-ON-WARNING="example@example.com"

Out of the box rkhunter usually gives some false positives so you need to take some time to configure it to whitelist certain items on your system or you will get an email every day saying there is a problem.

By: Gordon

Gordon — Sat, 06 Feb 2021 01:25:53 +0000

Is there an easy way to scan for malware in hardware/firmware?

By: 1776 Will Commence Again

1776 Will Commence Again — Mon, 14 Dec 2020 15:55:22 +0000

In reply to Chris.

Windows = Socialism
Linux = Capitalism