Compare software

chkrootkit vs THOR Lite: catalog facts
chkrootkit	THOR Lite
Free Free to download and use.	Free Free limited version of the commercial THOR scanner.
Linux, Command line	Windows, macOS, Linux, Command line
Checks for many known rootkits and trojaned binaries Detects deleted login records and promiscuous interfaces	Scans files, processes and autoruns with YARA and IOC signatures Precompiled for Windows, Linux and macOS
Command-line only Runs on the system it checks, so a thorough rootkit could hide from it	Not open source Limited modules and signature set compared to the paid THOR
Downloadable app	Downloadable app
Open source	Closed source
License not stated	License: Proprietary
No account needed	Not stated if an account is needed
Works offline	Works offline
Official website Full listing and sources Checked September 24, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.