check_malware.sh

#!/bin/bash

# Find execute files

mal=`find /home/*/.cagefs/tmp/ -type f -maxdepth 1 -executable 2> /dev/null`

# Writing to file

if [ -z "$mal" ]
then
        echo "OK - No malware file detected." > /tmp/malware.detect
else
        count=`echo $mal | wc -w`
        echo "WARNING - $count malware file(s) detected." > /tmp/malware.detect
        for x in $mal
        do
                # Define domain user's
		user=$(echo $x | cut -d "/" -f3)
		cron=$(cat /var/spool/cron/$user)
		dom=$(grep $user /etc/domainusers | head -n1)
		echo -e "$x | $dom \n $cron" >> /tmp/malware.detect
        done
fi