PDA

View Full Version : Maldet - Linux malware detector - How to install it/use it?



Fli
07-16-2014, 06:04 PM
How to install and use Maldet - linux malware detector?

This is Maldet website: https://www.rfxn.com/projects/linux-malware-detect/
or check https://github.com/rfxn/linux-malware-detect

Install Maldet on redhat/fedora/centos:
1) cd /tmp;wget wget http://www.rfxn.com/downloads/maldetect-current.tar.gz;
(if rfxn.com is offline, here is maldet i saved: 152)
2) tar xfz maldetect-current.tar.gz;cd maldetect-*;./install.sh

Now it should be installed, then edit maldet configuration file:
vi /usr/local/maldetect/conf.maldet

I would enable email alert and set my email address.

There was created a daily cronjob in /etc/cron.daily to make maldet scans (can move it to weekly folder if wanted). To begin first Maldet scan one can do:
maldet --scan-all /home

but i would do it in "screen (http://internetlifeforum.com/linux-forums/1214-linux-command-screen-keep-commands-running%3B-work-separate-window/)" because scan can take a long time and one may need to work in ssh or scan is not interrupted if ssh connection fail.