Hello,

Server got hacked and all php files in all website contain the following code in the beginning.

http://pastebin.com/3PUgfwju

As I am hardening the server and trying to find culprit issues;

Can someone please find me a script which i can run to remove this code from all php files on the server.

Will be very grateful

Scrub entire server, start fresh, reload files from backup.

It's not worth the risk in trying to "fix" hacked files, you'll NEVER be sure you got them all, and then all of your work in rebuilding your server is once again rubbish.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.

Yeah, thats the way to go about it. Thanks

Still if anyone find himself in the same boat, use this;

http://pastebin.com/UyAR3nCr