StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
3cadd9c000f7abda3f802cd86a8bb3e997005480eea923b062032b96f0c4b9e4