chkrootkit.org

chkrootkit -- locally checks for signs of a rootkit

chkrootkit locally checks for signs of a rootkit. Includes ifpromisc.c to check if the interface is in promiscuous mode, chklastlog.c and chkwtmp.c to check for lastlog and wtmp deletions and chkproc.c for signs of LKM trojans.

chkrootkit, checkrootkit, check rootkit, rootkit, root kit, rootkit detection, script kiddie, lrk3, lrk4, lrk5, lrk6, t0rn, ark, ramen worm, rh shaper, rsha, romanian rootkit, lion worm, adore worm, lpd worm, kenny rk, lkm, kernel modules, security, promiscuous mode, ifpromisc c, lastlog deletions, chklastlog c, wtmp deletions, chkwtmp c, knark, adore, shitc worm, wormkit worm, maniac rk, dsc rootkit, ducoci, x c, rst b, duarawkz, monkit, hidrootkit, bobkit, pizdakit, showtee, optickit, t r k, george, suckit, scalper, slapper, openbsd rk v1, illogic rootkit, sk rootkit, sebek, loc, shv4, aquatica, zk, 55808 a, tc2, volc, gold2, anonoying, shkit, ajakit, zarwt, madalin, fu, kenga3, esrk, rootedoor, enye, lupper worm, shv5, osx rsplug a