Chkrootkit
From LinuxReviews
Jump to navigationJump to searchchkrootkit is a pretty advanced tool that checks for common signs of a rootkit being installed on Unix-variants.
It can detect hard-to-spot things like binary modification, changes to utmp/wtmp/lastlog and strange non-normal kernel modules.
- Homepage: http://www.chkrootkit.org/