StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
05453e68b128c4bc3d111e203127ddebcf8a353f6d35be8a1568db78e5a6bcf9