crude-shellhunter Fooling with AWK to remove webshells injected into client code. That's pretty much it.