Interesting ..

ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected"

Whats the -G option for ? on my ssh version its not there