The Zenwalk User Repository

chkrootkit is capable of checking for the presence of a rootkit in several ways, including: * Checks system binaries for rootkit modification * Checks for lastlog, utmp, wtmp, and wtmpx deletions * Checks for signs of LKM trojans For a list of rootkits, worms, and LKMs detected by chkrootkit, please visit http://www.chkrootkit.org