http://www.chkrootkit.org/
locally checks for signs of a rootkit