StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
a7774eef3632893c5a98ee5c960e6b6f9dbac1d3f386cf18305d212787aaa0c8