Meta tags:
author=Nelson Murilo, Klaus Steding-Jessen;
description=chkrootkit locally checks for signs of a rootkit. Includes ifpromisc.c to check if the interface is in promiscuous mode, chklastlog.c and chkwtmp.c to check for lastlog and wtmp deletions and chkproc.c for signs of LKM trojans.;
keywords=chkrootkit,checkrootkit,check rootkit,rootkit,root kit,rootkit detection,script kiddie,lrk3,lrk4,lrk5,lrk6,t0rn,ARK,Ramen Worm,rh-shaper,RSHA,romanian rootkit,Lion Worm,Adore Worm,LPD Worm,kenny-rk,LKM,Kernel Modules,security,promiscuous mode,ifpromisc.c,lastlog deletions,chklastlog.c,wtmp deletions,chkwtmp.c,knark,Adore,ShitC Worm,Omega Worm,Wormkit Worm,Maniac-RK,dsc-rootkit,Ducoci,x.c,RST.b,duarawkz,knark,Monkit,Hidrootkit,Bobkit,Pizdakit,Pizdakit,Showtee,Optickit,T.R.K,MithRa s,George,SucKIT,Scalper,Slapper,OpenBSD rk v1,Illogic rootkit,SK rootkit, sebek, LOC, shv4, Aquatica, ZK, 55808.A, TC2, Volc, Gold2, Anonoying, Shkit, AjaKit, zaRwT, Madalin, Fu, Kenga3, ESRK, rootedoor, Enye, Lupper.Worm, shv5, OSX.RSPlug.A;

Headings (most frequently used words):

what, new, tests, performed, and, rootkits, detected, support, us,

Text of the page (most frequently used words):
#rootkit (32), and (17), chkrootkit (12), worm (11), checks (10), for (10), linux (8), lkm (7), the (6), new (6), deletions (4), signs (4), date (3), you (3), are (3), please (3), rootkits (3), solaris (3), tests (3), development (2), supporting (2), send (2), gmail (2), com (2), shop (2), bug (2), author (2), authors (2), readme (2), freebsd (2), openbsd (2), malware (2), backdoor (2), romanian (2), slapper (2), scalper (2), t0rn (2), adore (2), variants (2), following (2), detected (2), chkutmp (2), named (2), top (2), what (2), strings (2), trojans (2), locally (2), 2021, cw2907, more, details, can, found, free, software, however, large, amounts, time, effort, into, its, continued, interested, financially, your, donation, nelsonmurilo, via, paypal, accept, bitcoin, well, like, our, work, consider, thank, comments, questions, reports, main, klaus, steding, jessen, email, protected, nelson, murilo, nmuriloat, contacting, here, patreon, support, has, been, tested, netbsd, tru64, bsdi, mac, syslogk, kovid, bpfdoor, umbreon, rocke, monero, miner, proxy, backdoors, mokes, xor, ddos, mumblehard, botnet, operation, windigo, 64bit, osx, rsplug, shv5, lupper, enye, rootedoor, esrk, kenga3, madalin, zarwt, ajakit, shkit, anonoying, gold2, volc, tc2, 55808, aquatica, shv4, loc, sebek, illogic, suckit, george, mithra, optickit, showtee, pizdakit, bobkit, hidrootkit, monkit, knark, duarawkz, rst, trojan, ducoci, dsc, maniac, wormkit, omega, shitc, kenny, lpd, lion, rk17, rsha, shaper, ramen, ambient, ark, lrk3, lrk4, lrk5, lrk6, worms, lkms, currently, aliens, asp, bindshell, rexedcs, sniffer, w55808, wted, osx_rsplug, amd, basename, biff, chfn, chsh, cron, crontab, dirname, echo, egrep, env, find, fingerd, gpm, grep, hdparm, ifconfig, inetd, inetdconf, identd, init, killall, ldsopreload, login, lsof, mail, mingetty, netstat, passwd, pidof, pop2, pop3, pstree, rpcinfo, rlogind, rshd, slogin, sendmail, sshd, syslogd, tar, tcpd, tcpdump, telnetd, timed, traceroute, vdir, write, made, performed, bottkitty, uefi, bootkit, fixes, commands, nologin, process, executed, from, memory, this, version, includes, release, jan, 2026, now, available, cyber, security, news, after, years, still, helping, people, around, world, tools, scan, servers, vulnerability, utmp, quick, dirty, replacement, chkdirs, chkproc, wtmpx, only, check_wtmpx, wtmp, chkwtmp, lastlog, chklastlog, interface, promiscuous, mode, ifpromisc, shell, script, that, system, binaries, modification, tool, check, contains, mailing, list, faq, thanks, books, papers, related, links, mirrors, download, home,

Text of the page (random words):
chkrootkit locally checks for signs of a rootkit home download mirrors related links books and papers thanks faq what s new readme tests mailing list authors chkrootkit is a tool to locally check for signs of a rootkit it contains chkrootkit shell script that checks system binaries for rootkit modification ifpromisc c checks if the interface is in promiscuous mode chklastlog c checks for lastlog deletions chkwtmp c checks for wtmp deletions check_wtmpx c checks for wtmpx deletions solaris only chkproc c checks for signs of lkm trojans chkdirs c checks for signs of lkm trojans strings c quick and dirty strings replacement chkutmp c checks for utmp deletions chkrootkit is named top 10 tools to scan linux servers for vulnerability and malware by cyber security news after 25 years still helping people around world what s new chkrootkit 0 59 is now available release date jan 01 2026 this version includes chkrootkit new checks process executed from memory new commands nologin xz backdoor bottkitty uefi bootkit bug fixes tests performed and rootkits detected the following tests are made aliens asp bindshell lkm rexedcs sniffer w55808 wted scalper slapper z2 chkutmp osx_rsplug amd basename biff chfn chsh cron crontab date du dirname echo egrep env find fingerd gpm grep hdparm su ifconfig inetd inetdconf identd init killall ldsopreload login ls lsof mail mingetty netstat named passwd pidof pop2 pop3 ps pstree rpcinfo rlogind rshd slogin sendmail sshd syslogd tar tcpd tcpdump top telnetd timed traceroute vdir w write the following rootkits worms and lkms are currently detected 01 lrk3 lrk4 lrk5 lrk6 and variants 02 solaris rootkit 03 freebsd rootkit 04 t0rn and variants 05 ambient s rootkit ark 06 ramen worm 07 rh 67 shaper 08 rsha 09 romanian rootkit 10 rk17 11 lion worm 12 adore worm 13 lpd worm 14 kenny rk 15 adore lkm 16 shitc worm 17 omega worm 18 wormkit worm 19 maniac rk 20 dsc rootkit 21 ducoci rootkit 22 x c worm 23 rst b trojan 24 duarawkz 25 knark lkm 26 monkit 27 hidrootkit 28 bobkit 29 pizdakit 30 t0rn v8 0 31 showtee 32 optickit 33 t r k 34 mithra s rootkit 35 george 36 suckit 37 scalper 38 slapper a b c and d 39 openbsd rk v1 40 illogic rootkit 41 sk rootkit 42 sebek lkm 43 romanian rootkit 44 loc rootkit 45 shv4 rootkit 46 aquatica rootkit 47 zk rootkit 48 55808 a worm 49 tc2 worm 50 volc rootkit 51 gold2 rootkit 52 anonoying rootkit 53 shkit rootkit 54 ajakit rootkit 55 zarwt rootkit 56 madalin rootkit 57 fu rootkit 58 kenga3 rootkit 59 esrk rootkit 60 rootedoor rootkit 61 enye lkm 62 lupper worm 63 shv5 64 osx rsplug a 65 linux rootkit 64bit 66 operation windigo 67 mumblehard backdoor botnet 68 linux xor ddos malware 69 backdoors linux mokes a 70 linux proxy 10 71 rocke monero miner 72 umbreon linux rootkit 73 linux bpfdoor 74 kovid rootkit 75 syslogk rootkit chkrootkit has been tested on linux 2 0 x 2 2 x 2 4 x and 2 6 x 3x 4x and 5x freebsd 2 2 x 3 x 4 x 5 x 7 x and 10 x openbsd 2 x 3 x 4 x and 5 x netbsd 1 6 x solaris 2 5 1 2 6 8 0 and 9 0 hp ux 11 tru64 bsdi and mac os x more details can be found on the chkrootkit s readme support us chkrootkit is free software however large amounts of time and effort go into its continued development if you are interested in financially supporting the development of chkrootkit please send your donation to nelsonmurilo at gmail com via paypal we accept bitcoin as well if you like our work please consider supporting chkrootkit at patreon thank you chkrootkit shop new shop here contacting the authors please send comments new rootkits questions and bug reports to nelson murilo nmuriloat gmail com main author and klaus steding jessen email protected co author date 2021 04 cw2907 09 51 41