chkrootkit

chkrootkit(1)               General Commands Manual              chkrootkit(1)

NAME
       chkrootkit - Determine whether the system is infected with a rootkit

SYNOPSIS
       chkrootkit [OPTION]... [TESTNAME]...

DESCRIPTION
       chkrootkit  examines  certain  elements of the target system and deter-
       mines whether they have been tampered with. Some tools which chkrootkit
       applies  while  analyzing  binaries  and  log  files  can  be  found at
       /usr/lib/chkrootkit.

OPTIONS
       -h     Print a short help message and exit.

       -V     Print version information and exit.

       -l     Print available tests.

       -d     Enter debug mode.

       -x     Enter expert mode.

       -e     Exclude known false positive  files/dirs,  quoted,  space  sepa-
              rated.

       -q     Enter quiet mode.

       -r dir Use dir as the root directory.

       -p dir1:dir2:dirN
              Specify the path for the external commands used by chkrootkit.

       -n     skip NFS mounted dirs

AUTHOR
       Manual  page written by Yotam Rubin <yotam@makif.omer.k12.il> and lantz
       moore <lmoore@debian.org> for the Debian project. It  may  be  used  by
       others.

SEE ALSO
       strings(1)

                                10 January 2003                  chkrootkit(1)