malware scanner

[motokochan]

rkhunter and chkrootkit only check for system-level issues (as far as I know). Many malware scripts can be easily obfuscated, so it's difficult to check for a simple text string.

If you are paranoid, you could set up something like tripwire, but it can be very noisy on a webserver, especially when including web files for watching on changes.