hosting server find and replace script?
I have a huge problem! For several years I have paid for a hosting service and after installing a mobile access service to allow cell phone access to my sites, all heck broke loose. I had a pulgin hacked and yes I am 99% certain it was the mobi access as timing is way too coincidental. So now I have a infected hosting server. I was told to write a find and replace script by their tech support. To be honest I have not worked with linux/Unix in years (1980's) and am not confident enough to try this without advice.
I will give below the line so you can see whats found. The tech support guy was kind enough to do a search for the perevod.me iframes hack/infection.
find ./ -type f \( -iname \*.php -o -iname \*html\* -o -iname \*.js \) -print0 |xargs -0 egrep -ils '(eval\(base64\_decode|Array\(base64\_decode|\/*\/preg\_replace\(|function_exists\(.*\_jquery\_theme |iframe src\=\"xxxx\:\/\/perevod)'
had to replace the http with xxxx above because the site here thinks I am posting a link.
Now I have to figure out how to use a script to remove this trash.
Additional question: I found out the site perevod dot me is a fraud site according to the WHOIS Search, Domain Name, Website, and IP Tools - Who. information. The site city is fake, judging by the zip code, the telephone number is a sales infomecial for HGH, and the street address is also fake. I thought ICANN would disallow a registration over the fraud. How can I get this site removed as it is the hackers/infection site and it is also a blacklisted site loaded with really bad malware.
Anyways can anyone give me some advice on how to do a find and replace script?