updated buffer to compile without warning in relation to declaring variables before code. extracted define for pid to hide
added attempt to detect rootkit - currently gets too many false positives