rkhunter como alternativa Linux ao Malwarebytes
Atualizado em
Nossa avaliação
rkhunter is a useful tool for Linux users who need on‑demand rootkit detection and system integrity checks, but it is not a full replacement for Malwarebytes. Malwarebytes offers comprehensive anti‑virus, anti‑spyware, and anti‑adware protection across a wide range of malware families, while rkhunter focuses narrowly on rootkits, hidden files, and kernel tampering. If you run Linux and only need to guard against rootkits and basic file integrity, rkhunter can serve you well. For users who require broad malware scanning, real‑time protection, or a graphical interface, a dedicated Linux anti‑virus such as ClamAV or Sophos will be more appropriate.
- Licença
- GPL-2.0
- Preço
- Grátis
- Versão mais recente
- 1.4.6
- Avaliação
- —
O que funciona igual
- Both perform on‑demand scans of local file systems
- Both generate text‑based reports for analysis
- Both can be scheduled via cron or systemd timers
- Both verify checksums of critical system binaries
- Both check for hidden or tampered files
O que muda
- rkhunter only detects rootkits, backdoors and trojans; it does not scan for viruses, spyware or adware
- rkhunter lacks a real‑time or background scanning daemon; it runs only when invoked or scheduled
- Malwarebytes provides a graphical user interface; rkhunter is command‑line only
- Malwarebytes scans external media automatically; rkhunter requires explicit inclusion of external paths
- Malwarebytes includes a reputation‑based detection engine; rkhunter relies on static signatures and file checksums
Abrindo seus arquivos do Malwarebytes
rkhunter does not read or export Malwarebytes database or configuration files. Malwarebytes uses its own proprietary format, so there is no direct way to import its settings into rkhunter. If you need to migrate, you would have to reconfigure rkhunter manually.
Trocando o Malwarebytes pelo rkhunter, passo a passo
- Install rkhunter via your distribution’s package manager (e.g., apt install rkhunter, dnf install rkhunter).
- Run 'rkhunter --update' to download the latest signature database and hash list.
- Execute 'rkhunter --check' to perform an initial system scan and generate a report.
- Add any external media directories to the rkhunter configuration file if you want them scanned.
- Schedule regular scans with cron (e.g., '0 3 * * * /usr/bin/rkhunter --check --quiet').
Principais recursos do rkhunter
- Varre por assinaturas conhecidas de rootkits e arquivos ocultos
- Verifica hashes MD5 e SHA1 de binários críticos do sistema
- Verifica strings suspeitas em arquivos do sistema
- Detecta processos ocultos e módulos do kernel modificados
- Varre por exploits locais e backdoors
- Gera relatórios detalhados baseados em texto para análise
- Suporta varreduras agendadas via jobs de cron
Como instalar o rkhunter no Linux
sudo apt install rkhuntersudo apt install rkhuntersudo dnf install rkhuntersudo pacman -S rkhunterPerguntas frequentes
Does rkhunter detect all malware types?
No. It focuses on rootkits, hidden files, and kernel tampering. It does not detect viruses, spyware, or adware.
Can I use rkhunter to monitor USB drives?
Yes, but you must specify the mount point or path in the configuration or run it manually on that directory.
Is rkhunter resource‑heavy during background scans?
No. It runs quickly and uses minimal CPU and memory, making it suitable for scheduled background checks.