Some weeks ago 2 of my sites have been exploited probably from an ftp bruteforce attack corrupting lots of my websites files. I found out that they usually insert the following code in js or php files:
[Trojan code removed as irrelevant to this question.]
I want to login via ssh and run a grep command searching all files and giving output only for the ones that have this code included.
Any help?