When I log into WHM on our ded server there is a trojan scanner - ok.

But this scanner runs within the system which he should verify.

So the probability that root kits manipulate the results of this embedded scanner are high.

Is there something like an external virsu scanner ?

That means our target ded server shout be shutdown temporarily at first and a virus scanner running from a second, clean system should investigate the hard disc and files of our ded Server.

Is this possible ?

Peter