chkrootkit - Tool to locally check for signs of a rootkit

Description:

chkrootkit is a tool to locally check for signs of a rootkit.
It contains:

 * chkrootkit: shell script that checks system binaries for
   rootkit modification.
 * ifpromisc: checks if the network interface is in promiscuous mode.
 * chklastlog: checks for lastlog deletions.
 * chkwtmp: checks for wtmp deletions.
 * chkproc: checks for signs of LKM trojans.
 * chkdirs: checks for signs of LKM trojans.
 * strings: quick and dirty strings replacement.
 * chkutmp: checks for utmp deletions.

Homepage: http://www.chkrootkit.org

License: BSD-like

Vendor: Fedora Project

Packages

chkrootkit-0.47-8.fc8.i386 [286 KiB] Changelog by Michael Schwendt (2007-08-21):
- rebuilt