1. Download this script.
2. Change the domain name -  $webpath ="http:// youredomain.com/"; Line no.9
3. Upload this script through FTP to root folder so you can access script through URL like this “ youredomain.com/clean.php ”.
4. then go to your browser and copy and paste this adress:

·         PHP file - http://www.youredomain/clean.php?s=index.php&c=iframe

·         HTML file - http://www.youredomain/clean.php?s=index.html&c=iframe
this will scan all your files and folders for index.html and php injections

5      It will list all the ”index.php” or "index.html" files in your website and if any of the files contains the given string, it will print the part with the string. you can see that one file is infected.

Note that the script will not remove the iframes from your files.

To remove the iframes Injections Click here