Cpanel Joomla Malware Removal

I need every trace of malware removed from a cPanel account that hosts several sites—most of them run on Joomla, with one or two small WordPress installs sharing the same space. There are no usable backups, so the cleanup must be performed in-place without breaking live content or extensions.

Scope of work
• Perform a full scan of the entire cPanel home directory, databases, and mail folders, identifying malicious files, injected code, hidden cron jobs, and rogue users.
• Clean and patch each Joomla core, third-party extension, template, and the WordPress installs while keeping sites online as much as possible.
• Secure the server after cleanup: tighten file permissions, update .htaccess rules, remove unused themes/plugins, and ensure core CMS versions are current.
• Supply a concise report outlining what was found, what was removed, and the exact steps taken so I can track any future issues.

Acceptance criteria
The sites must load error-free, scan cleanly with tools such as ImunifyAV or Wordfence, and show no reinfection during a 48-hour observation window.

You will have full cPanel and PHPMyAdmin access; SSH can be enabled on request. Let me know your preferred tools or scripts before starting so we can coordinate and keep downtime to a minimum.