Chkrootkit

chkrootkit is a pretty advanced tool that checks for common signs of a rootkit being installed on Unix-variants.

It can detect hard-to-spot things like binary modification, changes to utmp/wtmp/lastlog and strange non-normal kernel modules.

• Homepage: http://www.chkrootkit.org/