Compare software

THOR Lite vs chkrootkit: catalog facts
THOR Lite	chkrootkit
Free Free limited version of the commercial THOR scanner.	Free Free to download and use.
Windows, macOS, Linux, Command line	Linux, Command line
Scans files, processes and autoruns with YARA and IOC signatures Precompiled for Windows, Linux and macOS	Checks for many known rootkits and trojaned binaries Detects deleted login records and promiscuous interfaces
Not open source Limited modules and signature set compared to the paid THOR	Command-line only Runs on the system it checks, so a thorough rootkit could hide from it
Downloadable app	Downloadable app
Closed source	Open source
License: Proprietary	License not stated
Not stated if an account is needed	No account needed
Works offline	Works offline
Official website Full listing and sources Checked September 24, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.