unhide.rb(8)

NAME
unhide.rb - Scans system for hidden processes and lists any hits on stderr.

SYNOPSIS
unhide.rb

DESCRIPTION
Scans the system for hidden processes.

Progress messages are printed on stdout and can be redirected to /dev/null.

Error diagnostics and information about any hidden processes found is printed to stderr.

OPTIONS
unhide.rb takes no options

EXIT STATUS

0   No hidden processes found

1   Something went wrong during scanning

2   One or more hidden processes were detected

BUGS
Report bugs to <johan.walles@gmail.com> or <https://bugs.launchpad.net/unhide.rb>.

LICENSING
unhide.rb is licensed under the GPL-3, copyright Johan Walles <johan.walles@gmail.com>.

SEE ALSO
rkhunter(8)

The unhide.rb home page: <http://launchpad.net/unhide.rb>

NOTES
unhide.rb is a Ruby port of unhide. When it was first written, the Ruby port was about 10x faster than the original C program and had much better diagnostics when hidden processes were found. The original unhide program can be found at <http://www.unhide-forensics.info/>.