Helmut wrote: > > Hallo, Bernd, > > Du meintest am 21.06.12: > > > is there a live cd with rootkit hunter ? > > That's not impossible but difficult. > > "rkhunter" first needs a run > > rkhunter --propupd > > to generate a file with a kind of checksums, and thereafter > it compares > the actual checksums with the data in this file.. > > A live cd must contain (or at least use) this file.
Hi, do i really need this file ? I understand that rkh also scans for known rootkits. That's another test. When i start now rkhunter -c, it looks for rootkits in my Ubuntu LiveCD, which isn't very senseful. I have a suspected harddisk mounted and want rkhunter to search für rootkits in the mounted harddrive. I added the mountpoint of the harddisk to USER_FILEPROP_FILES_DIR in the conf, but it still does not look for rootkits in the mounted drive. How can i achieve this ? Bernd Helmholtz Zentrum München Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH) Ingolstädter Landstr. 1 85764 Neuherberg www.helmholtz-muenchen.de Aufsichtsratsvorsitzende: MinDir´in Bärbel Brumme-Bothe Geschäftsführer: Prof. Dr. Günther Wess und Dr. Nikolaus Blum Registergericht: Amtsgericht München HRB 6466 USt-IdNr: DE 129521671 ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
