chkrootkit - Tool to locally check for signs of a rootkit

Website: http://www.chkrootkit.org
License: BSD and GPLv2+ and Python
Description:
chkrootkit is a tool to locally check for signs of a rootkit.
It contains:

 * chkrootkit: shell script that checks system binaries for
   rootkit modification.
 * ifpromisc: checks if the network interface is in promiscuous mode.
 * chklastlog: checks for lastlog deletions.
 * chkwtmp: checks for wtmp deletions.
 * chkproc: checks for signs of LKM trojans.
 * chkdirs: checks for signs of LKM trojans.
 * strings: quick and dirty strings replacement.
 * chkutmp: checks for utmp deletions.

Packages:

chkrootkit-0.49-1.el5.art.i386 [285 KiB]

Changelog:

by Scott R. Shinn (2009-09-14):
- Update to 0.49
- Updated several patches, re-enabled php checks
Copyright © 2005-2010 Atomicorp, Inc.