rkhunter als Linux-Alternative zu Malwarebytes
Aktualisiert am
Unser Fazit
rkhunter is a useful tool for Linux users who need on‑demand rootkit detection and system integrity checks, but it is not a full replacement for Malwarebytes. Malwarebytes offers comprehensive anti‑virus, anti‑spyware, and anti‑adware protection across a wide range of malware families, while rkhunter focuses narrowly on rootkits, hidden files, and kernel tampering. If you run Linux and only need to guard against rootkits and basic file integrity, rkhunter can serve you well. For users who require broad malware scanning, real‑time protection, or a graphical interface, a dedicated Linux anti‑virus such as ClamAV or Sophos will be more appropriate.
- Lizenz
- GPL-2.0
- Preis
- Kostenlos
- Aktuelle Version
- 1.4.6
- Bewertung
- —
Was gleich funktioniert
- Both perform on‑demand scans of local file systems
- Both generate text‑based reports for analysis
- Both can be scheduled via cron or systemd timers
- Both verify checksums of critical system binaries
- Both check for hidden or tampered files
Was anders ist
- rkhunter only detects rootkits, backdoors and trojans; it does not scan for viruses, spyware or adware
- rkhunter lacks a real‑time or background scanning daemon; it runs only when invoked or scheduled
- Malwarebytes provides a graphical user interface; rkhunter is command‑line only
- Malwarebytes scans external media automatically; rkhunter requires explicit inclusion of external paths
- Malwarebytes includes a reputation‑based detection engine; rkhunter relies on static signatures and file checksums
Ihre Malwarebytes-Dateien öffnen
rkhunter does not read or export Malwarebytes database or configuration files. Malwarebytes uses its own proprietary format, so there is no direct way to import its settings into rkhunter. If you need to migrate, you would have to reconfigure rkhunter manually.
Von Malwarebytes zu rkhunter wechseln – Schritt für Schritt
- Install rkhunter via your distribution’s package manager (e.g., apt install rkhunter, dnf install rkhunter).
- Run 'rkhunter --update' to download the latest signature database and hash list.
- Execute 'rkhunter --check' to perform an initial system scan and generate a report.
- Add any external media directories to the rkhunter configuration file if you want them scanned.
- Schedule regular scans with cron (e.g., '0 3 * * * /usr/bin/rkhunter --check --quiet').
Wichtige Funktionen von rkhunter
- Scannt nach bekannten Rootkit-Signaturen und versteckten Dateien
- Verifiziert MD5- und SHA1-Hashes kritischer System-Binaries
- Prüft auf verdächtige Zeichenketten in Systemdateien
- Erkennt versteckte Prozesse und modifizierte Kernel-Module
- Scannt nach lokalen Exploits und Backdoors
- Erstellt detaillierte textbasierte Berichte zur Analyse
- Unterstützt geplante Scans über Cron-Jobs
rkhunter unter Linux installieren
sudo apt install rkhuntersudo apt install rkhuntersudo dnf install rkhuntersudo pacman -S rkhunterHäufige Fragen
Does rkhunter detect all malware types?
No. It focuses on rootkits, hidden files, and kernel tampering. It does not detect viruses, spyware, or adware.
Can I use rkhunter to monitor USB drives?
Yes, but you must specify the mount point or path in the configuration or run it manually on that directory.
Is rkhunter resource‑heavy during background scans?
No. It runs quickly and uses minimal CPU and memory, making it suitable for scheduled background checks.