A BSD Rootkit Primer
Subject:   disable klm
Date:   2007-09-01 23:27:18
From:   F.B
Response to: disable klm

You should read the book (and other resources such as Phrack and other underground magazines) to learn more about the subject.

Maybe you will devise a better defensive system. Or a better rootkit. Who knows?