How can i remove Backdoors correctly?

First, find the code that can start with the words http or runstring , and then just delete that part of the code (this search does not always help )