Linux Format forums

dickiemint5

Hello. Is there a way of pointing rkhunter, as found on the DEFT live cd, to search on the 'C' partition of a windows machine?
rkhunter is CLI driven, and I am next to useless at the command line. The same cd has clamtk as a windowed front end to clamav, which I can get to work fine.
In other words, command line help for rkhunter please.
Cheers
Dick

nelz · Posted: Tue Feb 23, 2010 3:08 pm Post subject:

No, because rkhunter is designed to test the currently running Unix-alike OS. You can have it check another supported OS with the --rootdir option, but not a Windows directory.
_________________
"Insanity: doing the same thing over and over again and expecting different results." (Albert Einstein)

dickiemint5 · Posted: Tue Feb 23, 2010 4:56 pm Post subject: Thanks

Thanks for that reply. Explains why I cannot do it then.javascript:emoticon(' Very Happy

')
Do you know of anything that will search for rootkits on a machine which is NOT running is installed OS?
Cheers
Dick

nelz · Posted: Tue Feb 23, 2010 7:23 pm Post subject:

rkhunter will do that, but only for *nix OSes. Have you tried googling for Windows rootkit?
_________________
"Insanity: doing the same thing over and over again and expecting different results." (Albert Einstein)

dickiemint5 · Posted: Wed Feb 24, 2010 8:32 pm Post subject: Windows rootkit finders

Thanks again nelz. Yes I have tried, but it gets confusing. Tried a microsoft 'revealer', and did not know what I was looking at. Tried Prevexcsi, which told me I had a virus which was not!
I shall have to take time to learn how to make a simple ubuntu cd with at least Clamtk, so that I can virus check an OS without running same.
In case you are wondering, I look after a Vista 32bit PC, which was running happily for some 3 years with no faults. Then a month ago it started to go slow. I found that around 85% of its 1 GB ram was being used, and that swapping the page file to HD was slowing the machine down considerably. I suspect a virus, but AVG et al shows nowt.
But that is not a subject for this forum.
Thanks again for your replies.
Dick

paulm · Posted: Wed Feb 24, 2010 9:52 pm Post subject: Re: Windows rootkit finders

dickiemint5 · Posted: Thu Feb 25, 2010 10:28 am Post subject: SystemRescueCD

Thanks for replying. I currently use Mint 8 as a desktop machine for all 'office' and internet work, so I am not against Linux, but rather very much for it. It is the command line I always have trouble with, and most advice is given with a command line example, and these days my pensioner brain struggles!!!
I will now have a learning curve with System Rescue. Ah well, keeps the brain ticking over.
Again, thanks for the replies.
Cheers.
Dick

towy71 · Posted: Thu Feb 25, 2010 10:50 am Post subject: Re: SystemRescueCD