chkrootkit -x lkm gives more info about the rootkit lmk chkrootkit creates a separate binary called chkproc that allows you to search for hidden processes.