Malicious Code Protection SIMP installs the chkrootkit tool. Chkrootkit scans systems for the presence of rootkits. A cron job runs chkrootkit once per day. References: SI-3, SI-3a.