Maldet (Linux Malware Detect) is an open-source malware scanner for Linux. It is used to scan malware on servers.

Step 1 – Installing maldet

Login as root user in order to get root access

Run the following commands:

commands
cd /usr/local/src/
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -xzf maldetect-current.tar.gz
rm -f maldetect-current.tar.gz
cd maldetect-*
./install.sh

Step 2 – updating maldet

Run the following command to update maldet malware signature

ShellScript
cd ~
maldet -u

Output:

sun@sofibox
root@sun:~# maldet -u
Linux Malware Detect v1.6.4
            (C) 2002-2019, R-fx Networks <proj@rfxn.com>
            (C) 2019, Ryan MacDonald <ryan@rfxn.com>
This program may be freely redistributed under the terms of the GNU GPL v2

maldet(2147800): {sigup} performing signature update check...
maldet(2147800): {sigup} local signature set is version 202210163213603
maldet(2147800): {sigup} latest signature set already installed
root@sun:~#

Step 3 – scan for malware

Run the following command to make full system scan

ShellScript
maldet -a /

Output:

sun@sofibox
root@sun:~# maldet -a /
Linux Malware Detect v1.6.4
            (C) 2002-2019, R-fx Networks <proj@rfxn.com>
            (C) 2019, Ryan MacDonald <ryan@rfxn.com>
This program may be freely redistributed under the terms of the GNU GPL v2

maldet(2545333): {scan} signatures loaded: 17287 (14458 MD5 | 2046 HEX | 783 YARA | 0 USER)
maldet(2545333): {scan} building file list for /, this might take awhile...
maldet(2545333): {scan} setting nice scheduler priorities for all operations: cpunice 19 , ionice 6
maldet(2545333): {scan} file list completed in 4s, found 124662 files...
maldet(2545333): {scan} found clamav binary at /usr/local/bin/clamscan, using clamav scanner engine...
maldet(2545333): {scan} scan of / (124662 files) in progress...

maldet(2545333): {scan} scan completed on /: files 124662, malware hits 0, cleaned hits 0, time 1184s
maldet(2545333): {scan} scan report saved, to view run: maldet --report 221017-1218.2545333

Leave a Reply