{"id":213,"date":"2016-02-24T14:36:03","date_gmt":"2016-02-24T14:36:03","guid":{"rendered":"http:\/\/www.josejavierfm.es\/blog\/?p=213"},"modified":"2016-02-24T14:36:03","modified_gmt":"2016-02-24T14:36:03","slug":"usar-notepad-para-limpiar-codigo-malicioso-en-ficheros-js","status":"publish","type":"post","link":"https:\/\/www.josejavierfm.es\/blog\/2016\/02\/24\/usar-notepad-para-limpiar-codigo-malicioso-en-ficheros-js\/","title":{"rendered":"Usar notepad++ para limpiar c\u00f3digo malicioso en ficheros js"},"content":{"rendered":"<p>Debido a un ataque en el wordpress me encuentro mas de 200 ficheros con el codigo:<\/p>\n<p><a href=\"http:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus2.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-medium wp-image-214\" src=\"http:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus2-300x189.jpg\" alt=\"virus2\" width=\"300\" height=\"189\" srcset=\"https:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus2-300x189.jpg 300w, https:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus2.jpg 594w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>En cada pagina es distinto y los antivirus no lo detectan ni lo limpia.<\/p>\n<p>Por lo que voy a utilizar el notepad++ para buscar y reemplazar.<br \/>\nPara ello utilizo la expresi\u00f3n regular:<br \/>\n<a href=\"http:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus1.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-medium wp-image-215\" src=\"http:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus1-300x98.jpg\" alt=\"virus1\" width=\"300\" height=\"98\" srcset=\"https:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus1-300x98.jpg 300w, https:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus1-1024x335.jpg 1024w, https:\/\/www.josejavierfm.es\/blog\/wp-content\/uploads\/2016\/02\/virus1.jpg 1226w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<pre>\\\/\\*(.)+function(.)+eval\\(eval(.)+\\*\\\/\r\n<\/pre>\n\n<div class=\"twitter-share\"><a href=\"https:\/\/twitter.com\/intent\/tweet?via=josejavierfm\" class=\"twitter-share-button\">Twittear<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Debido a un ataque en el wordpress me encuentro mas de 200 ficheros con el codigo: En cada pagina es distinto y los antivirus no lo detectan ni lo limpia. Por lo que voy a utilizar el notepad++ para buscar y reemplazar. Para ello utilizo la expresi\u00f3n regular: \\\/\\*(.)+function(.)+eval\\(eval(.)+\\*\\\/<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/posts\/213"}],"collection":[{"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/comments?post=213"}],"version-history":[{"count":1,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/posts\/213\/revisions"}],"predecessor-version":[{"id":216,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/posts\/213\/revisions\/216"}],"wp:attachment":[{"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/media?parent=213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/categories?post=213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.josejavierfm.es\/blog\/wp-json\/wp\/v2\/tags?post=213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}