Getting a lot of these...
lfd suspicious file alert
File: /tmp/apache-build/apr-util-1.5.3/xml/expat/buildconf.sh
You have simply to empty the tmp/apache-build folder!
You might want to refer this post: http://forum.centos-webpanel.com/apache/suspicious-file-alert-mail-every-night/