Here's some help from me...
a list of files with malicious code that my hosting detected:
/log.php",
/admin237/library/vendor/symfony/http-kernel/Exception/SHttpsExceptoin.php",
/admin237/library/vendor/illuminate/contracts/Encryption/DecException.php",
/admin237/library/vendor/illuminate/contracts/Auth/Provider.php",
/admin237/library/models/ModelCleaner.php",
/admin237/fpdf/makefont/parserbase.php",
/admin237/action/labels_down.php",
/admin237/viewer_importer_acc.php",
/ajax_viewer_acc.php",
/booking/ajax_user_records.php",
/assets/img/images-down_54591.php",
/assets/libraries/dompdf/dompdf/dompdf/src/LineBoxLoader.php",
/assets/libraries/twilio/Services/Twilio/Rest/SmsActionTrig.php",
/assets/libraries/twilio/Services/Twilio/Rest/TwilHelperAdvanceSys.php",
/assets/libraries/twilio/Services/Twilio/TaskLookingInstance.php",
/assets/libraries/twilio/tests/resources/task_router/TaskRoute.php",
/assets/libraries/twilio-php-master/Twilio/Rest/IpMessaging/V2/Service/ChannelRoute.php",
/assets/libraries/twilio-php-master/Twilio/Rest/IpMessaging/V2/ServiceRoute.php",
/assets/libraries/twilio-php-master/Twilio/Rest/IpMessaging/V1/Service/ChannelRoute.php",
/assets/libraries/twilio-php-master/Twilio/Rest/Wireless/V1/RateInstancePlan.php",
/assets/libraries/twilio-php-master/Twilio/Exceptions/HttpRestException.php",
/assets/libraries/imagecraft/coldume/imc-stream/src/Exception/TranslationException.php",
/assets/libraries/PdfToImage/vendor/spatie/pdf-to-image/src/Exceptions/PdfNonReadable.php",
/assets/plugins/animate/source/lightSpeedOut.php",
/assets/plugins/switch/static/stylesheets/flat-ui-down.php"
in each of those files, find the following $data_encc =
and delete all the code that follows after
$data_encc =
is a long series of letters and numbers that are not part of the code
Other files and codes to be removed were also previously recommended. I will also list them here.
/admin237/adminer/php
/adminer.php
/adminer4.php
/datafile-adminer.php
/asset/libraries/firebase/src/firebasedb.php
/asset/libraries/Twilio//services/Rest/Twiml_Token.php
/defines.php and /assets/libraries/defines.php (comment out line 8, 9)
remove folder /asset/libraries/twilio-php-master
if there is more code to clean, please share!
I hope you find it useful