chkrootkit V. 0.17 locally checks for signs of a rootkit. Includes detection of LKM rootkits, ifpromisc.c to check and see if the interface is in promisc mode, chklastlog.c to check lastlog for deletions, and chkwtmp.c to check wtmp for deletions. Tested on Linux, FreeBSD, and Solaris.
You can download it from the following link: https://packetstormsecurity.com/files/download/23153/chkrootkit-0.17.tar.gz
Source: https://packetstormsecurity.com/files/23153/chkrootkit-0.17.tar.gz.html