Repair hacked sites on development server

Job ID: 33035272

Budget: $30 – $250 USD

I have a development server that hosts our template sites and sites in development (builtbypearlcitymedia.com) plus a couple other domains. It was recently hacked and for some reason the server hadn't been running backups. I need to get it fixed.

What I've identified:
* every folder in this WHM user has had a 0.php, index.html and index.php file added to it.
* 0.php file content: <?=/****/@null; /********/ /*******/ /********/@trim("?>");/**/?>
* index.html and index.php are empty
* I use immunify to clean/protect. It finds them in a scan and removes, but still not working
* Probably need to update all user passwords

I can provide root access to my whm.
Related categories: PHP Linux Web Security WordPress MySQL