This script can be heplfull if your drupal 7 site have been hacked with "eval(String.fromCharCode" javascript code.

jseval-exploit-fix.sh

#!/bin/sh
# Run the script and put path as first parameter.

grep -rl 'eval(String.fromCharCode(' $1 | while read -r line ; do
  if [ -f "$line" ]
  then
    echo "Fixing file $line \n"
    sed -i 's/<script language=javascript>\([a-zA-Z0-9();.,\ ]*\)<\/script>//g' $line
  fi
done