How to remove .htaccess virus? [closed]

Question

First time posting so bear with me please!

My friend's site has been hacked and the .htaccess file (which I really know nothing about) has been injected with a malicious redirect that forces search engines to the see the site as a "harmful website." If you look at the .htaccess file you can see it's Russian or at least ends in .ru. Seeing as I know very little about this stuff, I simply tried to restore the good .htaccess file back with his host. This doesn't work as the virus just recreates the infected .htaccess file.

When I searched through the rest of his directories, I can see the same bad .htaccess file in most of the folders.

I can't seem to help him get rid of this virus.

Answer 1

1. change the root password
   
2. make sure that root is the owner of .htaccess (that's the default!)
   
3. remove write permissions!