Chkrootkit

• # tar xzf chkrootkit.tar.gz

• # cd chkrootkit-<version>

• # make sense > /dev/null

• # ./chkrootkit -r /analyse/root

• ...

• Checking `ifconfig'... INFECTED

• ...

• Checking `identd'... INFECTED

• ...