Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteUse rkhunter as an investigation aid, not as a yes-or-no security verdict. Install it from Ubuntu’s package repository, establish a file-property baseline only while the VPS is trusted, refresh its data files, run checks, and investigate every warning against package records, deployment history, and host activity. A warning is a lead; it is not proof that a rootkit is present, and a clean report does not replace patching, SSH hardening, least privilege, backups, or an incident-response plan.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
What rkhunter checks—and what it cannot prove
RootKit Hunter (rkhunter) is a shell script and command-line utility for Unix-like systems. On Ubuntu, it checks for known rootkits and unwanted tools, compares selected file properties with a stored baseline, examines startup files, and looks for suspicious network interfaces or listening applications. It reports conditions that deserve review; it does not explain why every file changed, determine the full scope of an intrusion, or certify that a VPS is clean.
As an Amazon Associate I earn from qualifying purchases.
Its checks are therefore most useful when they are part of a wider control set. Regular security updates, restrictive SSH configuration, least-privilege accounts, tested backups, centralized logs, and a documented response process address risks that a rootkit scanner cannot.
Prepare the VPS before installing
You need an Ubuntu VPS with an account that can run sudo. Make sure you can access the provider’s recovery or isolation controls before scanning: those controls may be needed if a result points to an active compromise. Keep a record of normal deployments and package changes so that a later file-property warning can be compared with an expected event.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
The package installation uses Ubuntu’s normal repositories. The data-file update path requires a command-line web client; the documented options include wget or lynx. If your minimal image does not have one, install an approved client before attempting --update.
Install rkhunter from Ubuntu’s repository
- Refresh the package index:
sudo apt update - Install the package:
sudo apt install rkhunter - Read and answer the package prompts. After installation, inspect the resulting configuration before making a baseline or scheduling scans.
Do not treat installation as a security conclusion. The package gives you the scanner; trust still depends on the state of the VPS and on how you interpret its output.
Establish a trusted file-property baseline
After a clean Ubuntu installation—or after you have reviewed and accepted legitimate package and deployment changes—record the current file properties:
sudo rkhunter --propupd
This command creates or updates rkhunter’s comparison baseline. It can include properties such as those used to notice an unexpected change. The administrator is responsible for confirming that the files are genuine before running it. If an attacker has modified a file, running --propupd afterward can bless the malicious state as the new reference and make future comparisons less useful.
- Run
--propupdimmediately after a trusted, verified installation. - Run it again only after you have explained legitimate changes, such as an Ubuntu package upgrade or an approved deployment.
- Never trigger it automatically just because a check produced an unexplained warning.
- Record why the baseline changed, which package or deployment caused it, and who approved the change.
Refresh rkhunter’s data files
Known-rootkit and configuration data can change independently of the installed package. Refresh those files with:
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
sudo rkhunter --update
The command checks for newer text data files and installs them when available. A command-line web client such as wget or lynx is required by the documented update path. If the update cannot reach its source, do not interpret an old database as current coverage; fix the connectivity or client prerequisite, then rerun the update and note the date of the successful refresh.
Run a scan and preserve the evidence
Start the checks with:
sudo rkhunter --check
rkhunter displays each test and writes its log to /var/log/rkhunter.log. Review that file after the command finishes:
sudo less /var/log/rkhunter.log
For a quick review that shows only items classified as warnings, use:
sudo rkhunter --check --report-warnings-only
That option is a reporting filter, not a narrower investigation. Keep the complete log even when you use the filtered view, because the surrounding test results and timestamps help explain a warning. For cron output or other machine-collected logs, add --nocolors so terminal color codes do not obscure parsing:
sudo rkhunter --check --nocolors
Store logs according to your normal retention policy. A single report is less useful than a dated sequence that shows when a warning first appeared and whether it persists after an explained change.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Validate configuration after changes
Check the configuration syntax and values with:
sudo rkhunter --config-check
rkhunter supports a main rkhunter.conf, a same-directory rkhunter.conf.local, and an rkhunter.d directory containing local .conf fragments. Use the local mechanisms for administrator-specific settings rather than making undocumented edits to package-managed files. Run --config-check after every configuration change and keep the change under your normal administration record.
Whitelisting can prevent a known, legitimate path from generating a recurring notice, but it also removes that path from attention. Confirm ownership, package provenance, permissions, timestamps, and deployment purpose independently before adding an exception. A whitelist should explain a known condition, not make a report look clean.
How to investigate a warning
First-run warnings are common, and normal package upgrades can change file properties. Treat each message as a question: what changed, who changed it, and is the change authorized?
Recommended Free Tools
- Capture the exact finding. Save the relevant lines from the terminal and the full
/var/log/rkhunter.log, including the date and test name. - Identify the object. For a file, record its path, ownership, permissions, timestamps, and the package or deployment that should own it. For a startup entry, identify the service or script that creates it. For a listener, record the address, port, process, and owning account.
- Compare with Ubuntu package records. Determine whether an installed package owns the file and whether a recent package transaction explains the property change. Review recent
apthistory and your deployment records. - Check the host context. Look for an approved maintenance window, configuration-management run, kernel or service update, or permission change. An explanation should be specific and documented, not merely “the server seems normal.”
- Rerun the check after documenting the explanation. If the finding is legitimate and the system remains trusted, update the baseline at the appropriate point. If it is unexplained, leave the baseline unchanged and escalate.
Do not silence a warning solely to obtain a green report. Repeated warnings that have no package, deployment, or administrative explanation deserve more scrutiny than a one-time notice tied to a recorded upgrade.
When a finding may indicate compromise
Escalate promptly when a warning involves an unknown binary, an unexpected startup entry, an unexplained account, or a network listener that no approved service owns. rkhunter alone cannot establish the attacker’s scope or eradicate an intrusion, so avoid using it as the only basis for declaring the VPS safe.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
- Use the VPS provider’s controls to isolate the machine from the network when practical, while preserving the evidence needed for investigation.
- Preserve rkhunter logs, system logs, relevant disk images or snapshots, package history, and deployment records according to your incident-response process. Avoid altering suspicious files unnecessarily.
- From a clean device, rotate passwords, SSH keys, API tokens, and other credentials that may have been present on the VPS. Revoke old credentials rather than merely adding new ones.
- Follow your incident-response plan to determine scope, rebuild or clean the host, validate restored data, and document the timeline. A successful rkhunter rerun is not proof that an earlier compromise has been removed.
Automate recurring checks without corrupting the baseline
rkhunter can run from cron, but automation must preserve human review. Schedule data updates and checks as separate jobs or in a controlled sequence, capture the command exit status, retain /var/log/rkhunter.log, and use --nocolors for machine-readable output.
Alert on new warnings rather than sending every historical warning on every run. Your automation should compare the current result with the last reviewed state and route unexplained changes to an administrator. Keep the update and check timestamps so an alert shows whether the scanner used freshly refreshed data.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteOperating-system and package changes require a baseline decision. After a legitimate change, review the affected files and then run sudo rkhunter --propupd deliberately. Never grant an unattended cron job permission to overwrite the baseline in response to an unexplained state; that would erase the very comparison the check is meant to provide.
Where rkhunter fits with other security controls
The right comparison is about coverage and response, not which tool produces the most warnings. The following distinctions help you decide what rkhunter should and should not do on a VPS.
| Control characteristic | rkhunter’s role | What another control may add |
|---|---|---|
| Detection scope | Known rootkits and unwanted tools, file-property changes, startup files, and suspicious network conditions. | Behavioral monitoring or host telemetry can observe activity that has no known signature. |
| Baseline maintenance | Depends on a trusted property baseline and careful use of --propupd. |
A separate integrity system may provide different baselining, versioning, or centralized review. |
| False-positive handling | Requires package, deployment, and host investigation; warnings are not verdicts. | Change-management data and centralized inventory can supply more context. |
| Automation and alerting | Can run from cron, write a log, filter warnings, and suppress color codes. | A monitoring system can correlate events across several VPSs and alert on newly observed conditions. |
| Response | Provides evidence and leads. | Isolation, forensic collection, credential revocation, rebuilding, and recovery procedures determine what happens next. |
Use rkhunter as one layer in that arrangement. It is valuable for inexpensive, repeatable checks, but it is not a replacement for patch management, access control, logging, backups, or a tested response process.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Common failure modes and fixes
Running --propupd after every warning
Why it fails: It can make a compromised file the accepted baseline. Fix: verify package ownership, apt history, deployment records, and host context first; update the baseline only after the state is trusted.
Assuming a warning proves a rootkit
Why it fails: legitimate upgrades and configuration changes can alter the properties rkhunter checks. Fix: investigate the exact object and rerun the check after documenting an authorized explanation.
Ignoring the full log because the filtered report is empty
Why it fails: --report-warnings-only changes what is displayed, not what was tested. Fix: retain and review /var/log/rkhunter.log and use the filtered output only as a triage view.
Updating data files without recording whether the update succeeded
Why it fails: a missing command-line web client or connectivity problem can leave stale data in place. Fix: satisfy the wget or lynx prerequisite, confirm the update completes, and record its date.
Whitelisting an unexplained path
Why it fails: it hides a symptom without establishing legitimacy. Fix: whitelist only after independent confirmation, and document the reason and approving administrator.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Treating one clean scan as permanent assurance
Why it fails: the VPS changes over time and rkhunter cannot prove absence of every form of compromise. Fix: scan regularly, keep logs, refresh data, and maintain the surrounding security controls.
Quick Recap
Operational checklist
- Install with
sudo apt updateandsudo apt install rkhunter. - Inspect configuration and package prompts before creating a baseline.
- Run
sudo rkhunter --propupdonly while the system state is verified and trusted. - Refresh data with
sudo rkhunter --update; ensure a supported command-line web client is available. - Run
sudo rkhunter --checkand retain/var/log/rkhunter.log. - Use
--report-warnings-onlyfor triage and--nocolorsfor cron or machine logs. - Run
sudo rkhunter --config-checkafter configuration edits. - Investigate warnings against package ownership, apt history, deployments, permissions, timestamps, accounts, and listeners.
- Isolate, preserve evidence, rotate credentials from a clean device, and invoke incident response for unexplained high-risk findings.
- Review the baseline after every legitimate operating-system or package change; never overwrite it automatically.
Quick command reference
| Purpose | Command | Result |
|---|---|---|
| Refresh Ubuntu package indexes | sudo apt update |
Obtains current repository metadata. |
| Install rkhunter | sudo apt install rkhunter |
Installs the scanner and its package-managed configuration. |
| Create or update the property baseline | sudo rkhunter --propupd |
Records current file properties for later comparison; use only after verification. |
| Refresh rkhunter data | sudo rkhunter --update |
Checks for and installs newer text data files. |
| Run checks | sudo rkhunter --check |
Runs tests and writes /var/log/rkhunter.log. |
| Show warnings only | sudo rkhunter --check --report-warnings-only |
Reduces displayed output to warnings; retain the full log. |
| Remove terminal color codes | sudo rkhunter --check --nocolors |
Produces cleaner output for cron and log collectors. |
| Validate configuration | sudo rkhunter --config-check |
Checks configuration after edits. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
