malware scanner

[xchrix]

hey thanks for your reply. but i think tripwire is not what i am searching for.
i knwo that many malware scripts are obfuscated but there must be a database for known malware script and how the look like.

we only have to make an scanner which scans all html/php files in /var/www/virtual and checks if the code looks the same as an known malware script. i know that we cant get 100% of the scripts out there but old scripts wont work anymore.