rkhunter (or Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and local exploits. It does this by comparing MD5 hash of important files with known good ones in an online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules. It should run on almost every Unix clone.
rkhunter
Checking for rootkits, exploits and backdoors with Rootkit Hunter
Submitted by sandip on Fri, 04/14/2006 - 09:26