Knark is a kernel based rootkit for Linux 2.2. Hides files in the filesystem, strings from /proc/net for netstat, processes, and program execution redirects for seamlessly bypassing tripwire / md5sum.
0a74c43e3e1e3f191114cf82097d3a11d695c91a6730013a6977c69ccf3c7273