malware scanner

[kilburn]

Have you tried using clamdscan (the file scanner from clamav)? I'm not sure that it will catch these kind of trojans/redirectors, but I would give it a try. Additionally, infected scripts used to try commands or send e-mails tend to be noisy and/or make strange requests, so logwatch monitoring your apache logfiles should be a good way to catch them...