The crack injects all of PHP files in the first line with the form:
<?php ...../** INJECTED CODE */ ?> <?php// NORMAL LINES...Remove first line that get injected on all PHP files:
find ./ -iname '*.php' -exec sed -i '1 s/<?php/\n&/2;s/<?php.*\n//' {} \;

