The hosting company has disabled the ability to send emails from our PHP webspace because an excessive amount of email has been sent through it.

They recommend to: Download a copy of the website locally and run a virus scan on it to find out where the malicious code may be.

My question is now what programme I should use to do a scan an a Mac. Just a regular old anti virus scan programme? Will that deal with website files and malicious code? I don't currently have an anti virus programme installed on my Mac.

Also, there's a MySQL database for this webspace. Does this also need to be looked at, and how would I go about doing this?

Many thanks.