New eBury malware checks, updated permission check

===

ADDED - eBury 1.5 detection.

===

UPDATED - All eBury/CDorked/libkeyutils escalation notices are now consistent and mention both premades that should be used, not just the L3 one.

Requested by:
  Jennifer Vasquez

===

UPDATED - Add /var/cpanel/locale/themes to permissions check.

Patch provided by:
  Mary Wior

===