Scanning Trojaned Models Using Out-of-Distribution Samples