This rootkit as a mix of some others.
No more information is available.
Origin of Rule ————~-
This rootkit was taken from chkrootkit:
### T.R.K
expertmode_output "${find} ${ROOTDIR}usr/bin -name sourcemask -o -name ct"
Note
All files with an “*” need to be search in all system