Just thought I'd pop the question here in case anyone was familiar with this aspect of security.

I'm looking for an accurate (hopefully free) scanner for detecting malware on a web site. Google obviously have their own method, but it doesn't appear to be available as a downloadable script. I suppose I shouldn't be surprised as public access to their script would be a god-send to unethical hackers.

If any of you have experience in this area, I would appreciate your advice.

Also, if I managed to find such a script, how would I go about testing it? I presume I would have to load some real malware on my site or maybe test it locally using a XAMPP installation or similar. However, where would I get sample malware code?

Anyway, I live in hope of someone pointing me in the right direction.

Cheers to all