Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Chkrootkit on Live system???

Posted Mar 19, 2004 2:02 UTC (Fri) by AnswerGuy (guest, #1256)
Parent article: A new Adore root kit

I will find this out for myself later, but I really wish the author had
reported whether chkrootkit detects this new Adore on a live/compromised
system.

It can detect many of them. Of course a clean boot is far more dependable
but chkrootkit is cheap to run from cron (suitable obscured from the
cracker's scripts, of course).

(Log in to post comments)