Troj/RKPort-Fam is a family of kernel-mode driver rootkits.

Members of Troj/RKPort-Fam are capable of hiding information about activity on certain ports, providing stealthing by patching the kernel service descriptor table.

More information can be found at this Sophos page.