As a security for your server, or your company server, checking with chkrootkit if the system wasn’t compromised is a very good idea. On the net you can find a lot of small scripts which can detect 1-2 rootkit or something similar to rootkits, but none of this can detect and remove so many rootkits as chkrootkit can.

Chkrootkit can be found at chkrootkit.org, from where you can download it or read related documentation about it and so on.

Now lets pretend that you already have chkrootkit on your server and its working, but to be able to scan you need to do this manually, which means you need to login into the system every time.

(more…)