[[http://www.chkrootkit.org/|chkrootkit]] checks locally for signs of a rootkit. Make sure to read the the[[http://www.chkrootkit.org/README|README]] for usage instructions.

Seems to give a false positive for the Suckit rootkit\\

This code is supposed to be a test for it
<code>
for i in *; do test -f $i/cmdline && (cat $i/cmdline; echo $i); done
</code>

Only Ubuntu ''Utopic'' seems to have an updated version in launchpad.