Suspicious files in /tmp:

World-writable files and folders:

Broken symlinks:

php.ini files with register_globals enabled:

Note: Speaking of cron jobs, you'll need to check those manually
Running processes:

32019 anasigns /ramdisk/bin/php5 /home4/anasigns/public_html/13moonsacupuncture/securityscan.php
32106 anasigns sh -c ps -eo pid,user,cmd | grep `whoami`
32108 anasigns ps -eo pid,user,cmd
32109 anasigns grep anasigns