http://www.chkrootkit.org/ has a very common prog for rootkit detection . http://www.tripwire.org/ is good to have installed on a clean system too.