1

I have a Ubuntu 15.10 Linux laptop PC with rkhunter installed now all I need to do is to confirm it working well like if there is an antivirus on your pc you will go to the eicar site and download the test file or you test a firewall with sheildsup but how do you test a root kit scanner like rkhunter with?

7
  • You actually have to set up rkhunter BEFORE you are infected, when you have a known clean system. You then run scans and compare it with the 'clean' state to determine if you have any system infections or compromises in it.
    – Thomas Ward
    Jan 19, 2016 at 15:40
  • I just installed a fresh one yesterday
    – user491354
    Jan 19, 2016 at 15:45
  • Then you record the current state of the machine, then later run rkhunter and compare to see if there were any changes. Sometimes changes happen due to software updates, so you have to keep track of those - that's the only real way to determine if rkhunter is working.
    – Thomas Ward
    Jan 19, 2016 at 15:58
  • What? In English please
    – user491354
    Jan 19, 2016 at 15:59
  • If you don't understand what I'm trying to say (SCAN when the system is clean. SAVE logs. Run rkhunter later, save those results. COMPARE those results from the CLEAN SCAN items, any changes may indicate infections or changes done by system updates), then you should not be using rkhunter, likely.
    – Thomas Ward
    Jan 19, 2016 at 16:00

0

You must log in to answer this question.