Page 2 of 2 FirstFirst 12
Results 11 to 11 of 11

Thread: Have I been hacked?

  1. #11
    Join Date
    Jun 2012
    Beans
    310

    Re: Have I been hacked?

    Quote Originally Posted by fugu2 View Post
    You really don't even need a duel boot if you have a spare usb drive lying around. Download your OS's *.iso file from ubuntu.com,
    Code:
    sudo apt-get install unetbootin
    to install unetbootin. Run unetbootin to drop that iso file into your usb drive (WARNING: this may erase all of your data on that drive, so use a fresh drive if you can or backup your bytes). then boot up to the usb drive and scan your hard drive with your new liveusb.
    Well I said dual boot because I already have that , my question was not so much about which boot media to use (I reckon you have plenty to choose from, regarding usb sticks I think you don't even need unetbootin, as there is usb-creator installed by default in latest releases) but rather about the specific issue of rkhunter scanning external partitions : does it scan all mounted partitions by default, as part of a normal system scan?
    I thought that rkhunter only searched in specific paths in the installed system.

    EDIT: well, after reading more carefully the man pages looks like the option I'm after would be
    Code:
    chhrootkit -r [path_to_mounted_media]
    and
    Code:
    rkhunter --rootdir [path_to_mounted_media]
    unfortunately the latter is currently deprecated and removed as of version 1.4.0 .
    Last edited by cogset; January 19th, 2015 at 04:20 PM.

Page 2 of 2 FirstFirst 12

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •