Removing malware from my Magento 2.3.5

My magento was really hacked. We found the following files that were infected by some malware:

/home/rbtbruww/public_html/apis.php
/home/rbtbruww/public_html/system.php
/home/rbtbruww/public_html/app/bootstrap.php
/home/rbtbruww/public_html/pub/errors/503.php
/home/rbtbruww/public_html/pub/errors/506.php
/home/rbtbruww/public_html/pub/health_check.php
/home/rbtbruww/public_html/lib/default.php
/home/rbtbruww/public_html/pub/crond.php
/home/rbtbruww/public_html/pub/errors/default/images/default.php
/home/rbtbruww/public_html/setup/api.php
/home/rbtbruww/public_html/blog.php

As a result the payment arrive to other paypal acocunt than set in the Magento admin area.

My shop need and urgent fix and maybe an upgrade as well.