Skip to content

--= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er

Notifications You must be signed in to change notification settings

wuyouzi/rootkit_checker

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 

Repository files navigation

Xt9 Anti Rootkit

#############install################ unzip process_list.zip;cd process_list;make;make install

#################################### suse10:~ # sleep 12345& [1] 4091 suse10:~ # sleep 54321& [2] 4098

suse10:/tl/adore-ng # insmod adore-ng.ko suse10:/tl/adore-ng # ./ava i 4091 Checking for adore 0.12 or higher ... Adore 1.56 installed. Good luck. Made PID 4091 invisible. suse10:/tl/adore-ng # vi suse10:/tl/adore-ng # cd /programme/del_task_4_hide/ suse10:/programme/del_task_4_hide # insmod delp.ko

suse10:~/programme/process_list_proc # make;make install

suse10:~/programme/process_list_proc # cat /proc/ps_list --= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er [4091] sleep [may be hiddened by vfs_readdir hook] [4098] sleep [may be hiddened by REMOVE_LINKS]

About

--= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 93.1%
  • Makefile 6.9%