• chkrootkit -- locally checks for signs of a rootkit
  
  chkrootkit locally checks for signs of a rootkit. Includes ifpromisc.c to check if the interface is in promiscuous mode, chklastlog.c and chkwtmp.c to check for lastlog and wtmp deletions and chkproc.c for signs of LKM trojans.
  ark check checkrootkit chkrootkit detection kiddie kit lrk3 lrk4 lrk5 lrk6 ramen rh-shaper root rootkit rsha script t0rn worm
  in Public bookmarks with chkrootkit linux security by 11 users

chkrootkit from all users