Could it be possible to just remove the malicious code to remove the hack? Actually, now that I'm writing it out, it seems that'll just remove the symptom and leave the hack. Right? It's just I've seen many people worshiping the solution, "open the search file and replace".