Added a second check for detecting ebury

I added the "ssh -G" test to the script, based on the study of eset:
http://www.welivesecurity.com/wp-content/uploads/2014/03/operation_windigo.pdf