Site Hacked! Trying to remove spam site

A site of mine running Evo 1.5 has gotten hacked. It has ads appearing above all elements in the DOM. I run a scan in Sucuri and its came back with some info about how to remove it from WordPress sites http://blog.sucuri.net/2013/01/wordpress-spam-causing-headaches.html/sucuri-spam-payload but I am unable to figure out how to translate this to Evo.

Can anyone please give me some hints or direction? Any advice will do!

Thanks!

I deleted all docid in the cache file manually via FTP and it seems to have worked, though I am worried this is a short term solution and that the malware still lurks on there somewhere

Check the dates on your files. Unless you've done a lot of work on the site lately, they should all be from when you installed, or last worked with the site. It's likely that there are new files, or that the index.php or config.inc.php file at least have been modified recently, and will again add the spam links to your pages.

If you have a backup of the database the radical solution would be to delete the contents of the server and upgrade / update to the latest version 1.0.8

This way it ensures that there are no-longer files on the server that could be infected.

Preferably use a new database with your backed up DB dump, with a new password.

Next step:
Change all passwords for the manager (including all editors)
Change all passwords for FTP access

Been there, seen it, done it, not once, not twice

After doing this a few times you realise you need a fully working up-to-date copy on your local machine or on a different server as a back-up.

After doing this a few times you realise you need a fully working up-to-date copy on your local machine or on a different server as a back-up.

Yes! Somehow this gets little attention on the forum. Anyway this is exactly why I edit a local copy and update on-line.