Hunting the root kits

Within Linux mailing list there has been post on hacked Linux box. We have recommended root kit scan. There are two important tools on Linux now, rkhunter and chkrootkit. [root@box ~]# chkrootkit ROOTDIR is '/' Checking 'amd'... not found Checking 'basename'... not infected Checking 'biff'... not found Checking 'chfn'... not infected Checking 'chsh'... not infected Checking 'cron'... not infected Checking 'crontab'... not infected Checking 'date'... not infected Checking 'du'... not infected Checking 'dirname'. [Read More]