Does anyone know if there's any kind of script out there that will scan the server-side for known malware/phishing scams?

I'd like it to scan our files on the backend and alert us of any issues, before the malware companies notify us.

Take a look at www.clamav.net

clamav scanner lets you scan through files and their codes. pretty decent once you get used to it.

edit: tan beat me to it by a few seconds.

ClamAV is going to scan HTML files and look for phishing sites?

ClamAV is going to scan HTML files and look for phishing sites?


I think it wont..
it will only search for shells,etc

backing up ClamAV, it's definitely the best anti virus for Linux (imo)

Did anyone actually read my first post?

I'm not looking for a virus scanner, I'm looking for something that will search for phishing scams.

Will clamav do this?

If you know the pattern used for phishing scams you may write a script to scan/detect/remove and notify you.

But as others have said clamAV can do a lot, have a look at
http://forums.cpanel.net/f7/solution-gumblar-iframe-javascript-hacks-stolen-ftp-passwords-127013.html

And http://www.serverprogress.com/upload_guardian.php

I think both the solutions provide you the facility to insert your own custom rules.

BTW if you do find a solution, post it here for the benefit of every one.

And just to inform I am using the Anti Gumblar script mentioned above on one of my server and it works.

We're always on the look out for new rule submissions as well to add to the growing scanning engine database.

I'd recommend ClamAV as well, it's free and it can detect many classes of malware.

clamav definitely. CXS by ConfigServer also is a good investment as well.

all of the configserver addons for whm/cpanel are awesome.

Yeah, Clamv will the better options for the linux.

ClamAV is best antivirus for linux.

Get it before it hits or leaves your mail server. http://www.mailscanner.info/

Did anyone actually read my first post?

I'm not looking for a virus scanner, I'm looking for something that will search for phishing scams.

Will clamav do this?

Yes, it scans html and even some php. It won't catch everything (nothing will) but it's your best bet.