detect_preload

Small C application designed to detect LD_PRELOAD malware via the libdl library functions. Most public LD_PRELOAD rootkits don't hook any of the libdl functions, so you can easily reveal any "hidden" malware on the system. Usage:

gcc detect_preload.c -ldl -o detect_preload (add -DVERBOSE to enable verbosity)
./detect_preload