TOOL TUTORIAL · System Security & Rootkit Detection

How to install and use Chkrootkit

Chkrootkit (Check Rootkit) is a command-line tool designed to detect known rootkits on Unix-based systems. Rootkits are malicious software designed to hide the existence of certain processes or programs from normal methods of detection and enable continued privileged access to a…

Quick install: sudo apt install chkrootkit

Installation steps

  1. Open a terminal on your Linux system
  2. Run sudo apt install chkrootkit
  3. Run sudo chkrootkit to start a scan
  4. Read the output for any INFECTED lines

See the full Chkrootkit reference →