phpshells check
Code:
freshclam; clamscan -ir /home/*/public_html/* | tee ~/possible.phpshells
Code:
find /home/*/public_html/ -size -200k -type f -print0 | xargs -0 grep -iE "r57shell|c99shell|g00nshell|EgY_SpIdEr|egy_spider|phpjackal" | uniq -c | sort -u | cut -d":" -f1 | awk '{ print $2 }' | uniq > /root/possible.phpshells
