Malware, Pishing on Wordpress -- 2

There is malware, pishing etc on my server. These must be fixed and the 3 websites must be restored and FREE of DAMAGE. The pages must be made safe.
most of them are plugin errors on WP
here is the error code:
ext.php STRATO-apps/wordpress_02/app/wp-content/plugins/nhr.php STRATO-apps/wordpress_02/app/wp-content/plugins/ito.php STRATO-apps/wordpress_03/app/index.php STRATO-apps/wordpress_03/app/ext.php STRATO-apps/wordpress_03/app/content.php STRATO-apps/wordpress_03/app/jp/index.php about.php joomla_01/layouts/plugins/2index.php joomla_01/libraries/joomla/string/wrapper/content.php joomla_03/administrator/components/com_cache/views/2index.php joomla_03/administrator/components/com_menus/models/index.php joomla_03/plugins/fields/checkboxes/params/radio.php joomla_03/plugins/fields/url/content.php joomla_03/plugins/fields/media/params/content.php STRATO-apps/wordpress_02/app/about.php STRATO-apps/wordpress_03/app/about.php STRATO-apps/wordpress_03/app/wp-content/languages/wp-login.php STRATO-apps/wordpress_03/app/wp-includes/certificates/wp-login.php STRATO-apps/wordpress_03/app/wp-admin/user/index.php wp-content/plugins/elementor-pro/assets/js/index.php wp-content/themes/twentytwentytwo/inc/patterns/wp-login.php wp-content/plugins/newsletter/main/index.php joomla_03/images/icons/index.php wp-content/plugins/disclaimer-popup/public/index.php joomla_03/components/com_jce/views/index.php wp-content/plugins/disclaimer-popup/includes/index.php wp-content/themes/twentytwentytwo/templates/index.php wp-includes/blocks/index.php joomla_03/templates/shaper_helix_ii/html/index.php joomla_03/templates/shaper_helix_ii/layout/index.php joomla_03/plugins/editors-xtd/helix_shortcode/index.php STRATO-apps/wordpress_03/app/wp-admin/index.php joomla_03/layouts/joomla/error/index.php wp-content/plugins/wp-maintenance-mode/assets/index.php wp-content/uploads/elementor/screenshots/index.php wp-content/updraft/index.php wp-admin/index.php joomla_03/templates/shaper_helix_ii/css/index.php wp-includes/Requests/src/index.php wp-content/plugins/cookie-law-info/legacy/index.php wp-content/plugins/newsletter/emails/index.php joomla_03/components/com_jce/editor/index.php wp-content/plugins/duplicate-page/css/index.php wp-content/themes/twentytwentytwo/index.php wp-content/themes/twentytwentyone/index.php joomla_03/templates/shaper_helix_ii/js/index.php wp-content/themes/garanthairtheme/index.php wp-content/plugins/newsletter/unsubscription/index.php wp-content/plugins/updraftplus/index.php wp-content/plugins/wp-maintenance-mode/includes/index.php wp-content/logs/newsletter/index.php joomla_03/templates/shaper_helix_ii/index.php wp-content/themes/twentytwentythree/templates/index.php joomla_03/templates/shaper_helix_ii/images/index.php wp-content/plugins/newsletter/statistics/index.php wp-content/plugins/testimonial-widgets/index.php wp-content/plugins/wp-maintenance-mode/languages/index.php wp-admin/network/index.php joomla_03/administrator/components/com_jce/index.php wp-content/plugins/newsletter/users/index.php joomla_03/administrator/modules/mod_resethits/index.php joomla_01/libraries/cms/component/index.php joomla_03/components/com_jce/media/index.php wp-content/plugins/disclaimer-popup/index.php joomla_03/templates/shaper_helix_ii/less/index.php joomla_03/images/Fotos/index.php wp-content/plugins/akismet/index.php STRATO-apps/wordpress_02/app/wp-includes/index.php STRATO-apps/wordpress_03/app/wp-content/index.php joomla_01/images/Bilder/index.php wp-content/plugins/newsletter/profile/index.php wp-content/plugins/disclaimer-popup/admin/index.php wp-content/themes/twentytwenty/index.php wp-content/plugins/index.php wp-admin/user/index.php wp-content/plugins/wp-maintenance-mode/views/index.php wp-content/index.php wp-content/themes/index.php joomla_03/templates/shaper_helix_ii/features/index.php joomla_03/plugins/system/helix/index.php wp-content/plugins/wp-maintenance-mode/index.php STRATO-apps/wordpress_02/app/wp-content/index.php