unhide.rb - Scans system for hidden processes and lists any hits on stderr.
Contents
Bugs
Report bugs to <johan.walles@gmail.com> or <https://bugs.launchpad.net/unhide.rb>.
Description
Scans the system for hidden processes.
Progress messages are printed on stdout and can be redirected to /dev/null.
Error diagnostics and information about any hidden processes found is printed to stderr.
Exit Status
0 No hidden processes found
1 Something went wrong during scanning
2 One or more hidden processes were detected
Licensing
unhide.rb is licensed under the GPL-3, copyright Johan Walles <johan.walles@gmail.com>.
Name
unhide.rb - Scans system for hidden processes and lists any hits on stderr.
Notes
unhide.rb is a Ruby port of unhide. When it was first written, the Ruby port was about 10x faster than
the original C program and had much better diagnostics when hidden processes were found. The original
unhide program can be found at <http://www.unhide-forensics.info/>.
March 2011 unhide.rb(8)
Options
unhide.rb takes no options
See Also
rkhunter(8) The unhide.rb home page: <http://launchpad.net/unhide.rb>
Synopsis
unhide.rb
