Remove the same malware from three of our websites

Our websites are hacked with malware. We need to remove it. This is what the tech of the hosting service gave us. It gave 500 Internal server error. And then once that is cleared, it is redirected to another strange sit. We need to fix this. Thank you for contacting our Help Desk. I carefully checked the case and would like to infrom you that the unwanted redirect is a result of uploaded malware to your website/s: I have scanned the account and I am afraid there are some suspicious files, the complete scan is located in /home/pronuvia/[login to view URL] file: Code: Scanned Files : 266121 Scanner Hits : 15116 Time Taken : 498 (sec) You can remove the malicious code from the files, by following the steps below: 1) Scan and clean from viruses and malicious code all your local computers, where cPanel and the FTP services were accessed from. 2) From a clean computer, change the passwords for cPanel, FTP. Change them to very secure ones. 3) Download all your site's content locally to your computer and scan it with a reliable, up-to-date anti-virus and anti-malware program. 4) Clean review and, if needed, clean all the suspicious code from your account. - [login to view URL] 5) Upgrade and patch your site's applications and their themes, modules and plugins to the latest, stable and secure releases.