Subdomain Malware Cleanup Needed

My host has suspended service after flagging 11 malware-infected files across several subdomains. The primary domain is fine, so the task is to isolate those sub-sites, remove every malicious script, and get the account re-enabled.

We are on a shared-hosting cPanel account, and I currently have no antivirus or security solution running and, unfortunately, no backups to roll back to. I will provide full cPanel and FTP access as soon as we agree to proceed.

Here’s what I need from you:
• Identify every compromised file or folder within the affected subdomains without disturbing the main site.
• Clean or replace each infection, confirm that no backdoors remain, and document the changes.
• Coordinate with the hosting provider (or guide me) so they re-scan and lift the suspension.
• Recommend and, if possible, set up a lightweight security scanner and basic backup routine to prevent a repeat incident.

I value clear communication and a concise post-cleanup report that shows what was found, what was fixed, and any future hardening steps I should take. If you have handled malware remediation on shared hosting before, you’ll feel right at home here.