I am hosting the Canadian mirror for these guys.
"AIRT(Advanced incident response tool) is a set of incident response assistant tools on linux platform. It's useful when you want to know what evil kernel backdoor is still resident on your broken system and what the hell it is."
http://airt.hostprotect.net/
the original and Chinese site here:
http://159.226.5.93/projects/airt.htm