[chkrootkit: kicking script kiddies' asses since 1997]

locally checks for signs of a rootkit

The following people have contributed to the chkrootkit project:

   Agustin Navarro (debug help)
   Alberto Courrege Gomide (debug help)
   Andre Gustavo de Carvalho Albuquerque (debug, performance and Solaris patches)
   Dave Ansalvish (Solaris debug help)
   Bruno Lopes (debug help)
   Daniel Lafraia (source code addition)
   Josh Karp (debug help for Solaris 8)
   Klaus Steding-Jessen (debug, lots of good suggestions and LKM check Perl code)
   Paulo C. Marques F. (debug help)
   Pedro Vazquez (lots of good suggestions)
   Richard Eisenman (Red Hat support)
   Manfred Bartz (debug help)
   Luiz E. R. Cordeiro (debug help)
   Vince Hillier (debug help)
   Steve Campbell (Solaris bug fixes)
   Strashimir Mihnev (new rootkit)
   Patrick Duane Dunston (Adore LKM detection)
   Rudolf Leitgeb (chklastlog bug fix)
   Marcos Aguinaldo Forquesato (Solaris debug)
   scz (check_wtmpx code)
   Yaroslav Polyakov (inetdconf function)
   Andreas Tirok (chklastlog patch)
   Sean D. True (strings.c)
   Leif Neland (duarawkz rootkit)
   Kaveh Goudarzi (Pizdakit rootkit)
   m0xx (monkit and Bobkit rootkits)
   Bob Grabowsky and Mihai Sandu (t0rn v8.0 variant)
   Razvan Cosma (new rootkit)
   Kostya Kortchinsky (chkproc patch)
   Frank Haverkamp (new rookit)
   Ludovic Drolez (new rootkit)
   Dan Irwin (new rootkit)
   Anton Chuvakin (new rootkit)
   Steve Collins (new rootkit)
   Indra Kusuma (new rootkit)
   Mark Newby (new rootkit)
   anonymous (new rootkit)
   Gerard van Wageningen (chklastlog.c)
   Morohoshi Akihiko, Kostya Kortchinsky and Aaron Sherman (chkproc.c)
   Andrey Chernomyrdin (new rootkit)
   Razvan Cosma (new rootkit)
   zeno (new rootkits)
   Hal Pomeranz (chkdirs.c)
   marc (Bug report)
   Piete Brooks (patches for chkrootkit)
   Kostya Kortchinsky (chkproc Solaris port)
   Jan Brinham (chkrookit additions)
   Paulo Rodrigo (Bug report)
   Andreas Unterluggauer (Bug report)
   Mihnea Stoenescu (ideas for chkrootkit)
   Anton Chuvakin (new rootkit)
   Russ Reynaga (SunOS debug/tests)
   ymailer (lots of rootkits)
   Junichi Murakami (Adore detection method)
   Gérard Breiner (HP-UX Port)
   Andrea Barbieri (SunOS debug)
   Matthew Deatherage (Bug report)
   Eduardo Bacchi Kienetz (Slapper-B detection)
   aka br (SiN Rootkit)
   Ymailer (shv4, Big and Aquatica)
   Eduardo Bacchi (shv4)
   T. Tanaka (bug fix)
   Jan Iven (suckit tests)
   Rob Thomas
   Michael Griego (chkproc NPTL threading mechanisms patch)
   Marcel Haman (aditional Suckit detection)
   Andreas Grundle (Volc Rookit)
   Bejamin Molitor (Gold2 Rookit)
   James Mackinnon (TC2 Worm)
   Joshua J Robinson (Anonoying Rootkit)
   Bill Orvis (ZK Rootkit)
   Thomas Davidson (BSDI support)
   Bill DuPree (chkproc.c fix)
   Jeremy H. Brown (-r option corrections)
   Jason Montleon (bug report)
   Djony W Tambosi (bug report)
   Benjamin Schüdz (bug report)
   Eugene Tsyrklevich (bug report)
   Michael Dorrington (web page)
   Ragnar Rova (write test fix)
   Chris Campbell (C++ comments causing problems on old Solaris compilers)
   Markus Alt (Typo)
   Egon Eckert (tcpd test at debian)
   Silvio and nacho (zaRwT rootkit)
   Lantz Moore (promisc test on Linux kernels 2.[46].x)
   Marcel Haman (another Suckit sign)
   Alfred (found sniffer in another area (/usr/lib))
   Ymailer (several CGI backdoors)
   Dietrich Raisin (del counter fix in chkwtmp.c)
   Patrick Gosling (tnfs function improvement)
   Mikhail Zotov (bug report)
   Michael Schwendt (patches)
   Yukio Yamada (bug report)
   h0nIng (Fu rootkit)
   Jeff Kuehn (bug report)
   Jeremy Miller (chkutmp)
   Cristine Hoepers (chkrootkit homepage redesign using valid strict XHTML)
   Ighighi X (chkutmp)
   Jérémie Andréi (chkwtmp)
   Aaron Harwood
   Yjesus(unhide) (chkproc.c)
   Slider/Flimbo (chkproc.c)
   UnSpawn (error reports)
   Milan Kerslager (new rootkits signs)
   Gary Funk (new rootkits signs)
   Florian Gleixne (Solaris bug report and patch)
   Andre Russ (bug report and crontab patch)
   Michael Schwendt (OpenBSDrk v1 false positives on linux boxes)
   Johann Burkard (r57 backdoor report)
   Lieven De Keyzer (bug report)
   Bartosz Lis (bug report and patch)
   Ken Olum (bug report)
   Steve Pirk (Slackware crontab bug report and patch)
   Scott A. McIntyre (nice ideas)
   Lorenzo Patocchi (new rootkit signs)
Valid
XHTML 1.0! Valid CSS!
$Date: 2007/12/17 19:07:35 $