One of my Drupal sites was hacked
Rather than trying to undo the damage (will you ever be 100% sure you caught everything?) why not create a new site (edit: as in a new VM/box/image from scratch) and import your data fresh.<p>If I was hacked and files were placed on my server, including a 'web shell' I would be very afraid I don't catch everything and it just gets re-hacked.<p>Unless this is just a pure curiosity adventure in deobfuscation... then nevermind :)