run following command to delete files
#find -L /var/ -type f \( -name \*.jpg -or -name \*.png -or -name \*.jpeg -or -name \*.gif -or -name \*.bmp \) -type f -exec file {} \;|grep PHP >~/virus-files
It will be save in ~/virus-files, now we can delete all files which are mentioned in “virus-files” file
