Problem solve

Rootkit Hunter demo: Detect and remove Linux rootkits

Peter Giannoulis of The Academy Home and The Academy Pro demonstrates how to install and use Rootkit Hunter, a free rootkit scanner for Linux and BSD distributions.

By

Peter Giannoulis, Contributor

While Windows is the operating system that is most often targeted by attackers, malware can find its way into other...

Step 2 of 2:

You forgot to provide an Email Address.

This email address doesn’t appear to be valid.

This email address is already registered. Please login.

You have exceeded the maximum character limit.

Please provide a Corporate E-mail Address.
- I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.
Please check the box if you want to proceed.
- I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.
Please check the box if you want to proceed.

operating systems, including Linux.

In this month's screencast demonstration, Peter Giannoulis of The Academy Home and The Academy Pro demonstrates how to install and use Rootkit Hunter, a free rootkit scanner for Linux and BSD distributions that can detect dozens of malicious code variants that may otherwise go undetected.

Want more screencasts? Visit our screencast page.

About the author:
Peter Giannoulis, GSEC, GCIH, GCIA, GCFA, GCFW, GREM, CISSP, is an information security consultant in Toronto, Ontario. He currently maintains The Academy Home and The Academy Pro, which provide streaming video for enterprises and consumers on how to configure and troubleshoot many of today's top security products. He also serves as a technical director for GIAC.

Next Steps

Rootkit detection and malware removal FAQ

Detecting a Linux server hack

Rooting out a rootkit: Stage three -- Recovery

This was last published in May 2009

Dig Deeper on Alternative operating system security

rootkit A rootkit is a program or, more often, a collection of software tools that gives a threat actor remote access to and control over a computer or other system.

blue pill rootkit The blue pill rootkit is malware that executes as a hypervisor to gain control of computer resources. Joanna Rutkowska, a security researcher for Singapore-based IT security firm COSEINC, developed the Blue Pill rootkit as proof-of-concept malware, which she demonstrated at the 2006 Black Hat Briefings conference.

BIOS rootkit attack A BIOS-level rootkit attack, also known as a persistent BIOS attack, is an exploit in which the BIOS is flashed (updated) with malicious code. A BIOS rootkit is programming that enables remote administration.

BIOS rootkit A BIOS-level rootkit is programming that exists in a system's memory hardware to enable remote administration. Because the rootkit lives in the computer’s BIOS (basic input/output system), it persists not only through attempts to reflash the BIOS but also through hard drive erasure or replacement.

Detect rootkit alternate data streams (ADS) with StreamArmor In this month's screencast, Peter Giannoulis of TheAcademyPro.com explains how to use StreamArmor, a new tool that can detect alternate data streams that may be hiding rootkit data.

A botnet and rootkit removal 101 Stealthy botnet and rootkit attacks on enterprises are on the rise. Mikko Hypponen, F-Secure's chief research officer speaks to SearchSecurity.in about the recent botnet and rootkit attack patterns and ways to secure enterprises from such attacks.

Peter Giannoulis, Contributor asks:

Do you have any tips for using Rootkit Hunter you'd like to share?

Join the Discussion

Join the conversation

1 comment

Send me notifications when other members comment.

Oldest

[-]

Peter Giannoulis, Contributor - 20 May 2009 8:00 PM

Do you have any tips for using Rootkit Hunter you'd like to share?

-ADS BY GOOGLE

SearchCloudSecurity

McAfee launches security tool Mvision Cloud for Containers

Cloud security posture management, container images vulnerability scanning and DevOps integration are among features included in ...
How to implement zero-trust cloud security

The nature of cloud environments and workloads is changing. Security team approaches must evolve in response. Learn how to ...
AWS Access Analyzer aims to limit S3 bucket exposures

Amazon Web Services introduced the Access Analyzer tool at its re:Invent event. The new option aims to help users avoid ...

SearchNetworking

Consider these 5 FAQs for network monitoring best practices

New technologies are transforming how organizations plan network management and monitoring, introducing questions about legacy ...
Cisco's Silicon One networking chip targets cloud data centers

Cisco's Silicon One chip launch demonstrates a willingness to embrace white box routers in the hyperscale data centers of cloud ...
7 factors to consider in network redundancy design

Network pros have multiple factors to consider when it comes to adding redundancy in network design, including network equipment,...

SearchCIO

Transforming operations for successful cloud adoption

Still considering making the move to the cloud? Here are best practices and cloud-centric processes CIOs should follow to enable ...
IT workforce skews younger, says analysis of US data

The IT workforce is getting younger, according to government IT workforce data. The reasons for this are subject to a debate that...
Top edge computing trends to watch in 2020

Edge computing is still an evolving technology domain and enterprises should expect continued evolution in the year ahead. Here ...

SearchEnterpriseDesktop

How to shut down and restart a remote computer

Shutting down or restarting a computer remotely is often a necessary process. Explore the multiple ways to do so, using methods ...
Setting up Windows 10 kiosk mode with 4 different methods

For desktop admins, setting up Windows 10 kiosk mode can be a confusing process. IT should learn these four methods and choose ...
Microsoft extends Office 365 benefit to nonprofit volunteers

Thursday's announcement extends the company's September offering of 10 free Microsoft 365 Business licenses for nonprofits' ...

SearchCloudComputing

The future of the Kubernetes ecosystem isn't all about cloud

Developers still lean on the public cloud to simplify Kubernetes deployments, but that won't always be the case. See how ...
Evaluate general and niche cloud service use cases

Can't decide between a niche cloud provider or a hyperscaler? Review some real-world examples to help weigh the options and find ...
Compare niche cloud services to the hyperscale offerings

Consider your enterprise's specific needs when choosing between niche clouds and hyperscale clouds. Here's an overview of what ...

ComputerWeekly.com

Alarm bells ring, the IoT is listening

With Christmas bearing down on us, a series of vulnerability disclosures has drawn attention to the parlous state of IoT security...
New government faces calls to urgently deliver on pre-election pledge to review IR35 reforms

Contracting groups and trade associations say prime minister Boris Johnson must deliver on his party’s pledge to review the IR35 ...
Future fashion: does that dress come in digital?

A visit to a technology-fuelled fashion pop-up paints a picture of a world where retailers and brands sell virtual clothes for ...

Close