Does anyone know of a way to use rkhunter to scan a drive other than the drive it is installed on? I fix a lot of M$ Windows computers for folks, and my usual approach is to remove the hard drive and install it in my computer to repair registry errors and to run anti-virus checks. Clamav works fine for this. I would also like to be able to detect any rootkits on the drive, but I can't figure out how to do this with rkhunter. I have read the man pages and done a Google search but that was no help.
-
-
Re: Rkhunter usage question
AFAIK, you can't. rkhunter is for linux systems. You might want to take a look at RootkitRevealer which is for Windows.Using Kubuntu Linux since March 23, 2007
"It is a capital mistake to theorize before one has data." - Sherlock Holmes
-
Re: Rkhunter usage question
That's what I thought. So my best bet, is to open up my XP Pro install in virtualbox and run RootKitRevealer from there. I have to mount the drive in XP, then that should work. Marking topic as solved, though I was hoping for an easier solution.Comment
Comment