chkrootkit (Check Rootkit) is a common script used in linux servers, intended to help system administrators. Check their system for known rootkits
You can install ChkRootKit by following the below shown steps.
cd /usr/local/src/
– Down load the chkrootkit.
# wget https://www.spenneberg.org/chkrootkit-mirror/files/chkrootkit.tar.gz
# wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
– Unpack the chkrootkit you just downloaded.
# tar -xvzf chkrootkit.tar.gz
– Change to new directory
# cd chkrootkit-*
(select the version )
– Compile chkrootkit
# make sense
– Run chkrootkit
# ./chkrootkit
How to setup a daily scan report?
– Load crontab
# crontab -e
– Add this line to the top:
*************************
0 1 * * * (cd /usr/local/src/chkrootkit*; ./chkrootkit 2>&1 | mail -s “chkrootkit output” email@domain.com)
*************************