Hoster blocks the site on suspicion of hacking?

Question

CMS

Hosting service has been suspended.
Hello!
Access to your hosting was not limited.
The work of the hosting web server can be restored only after the removal of the malicious code from the site, otherwise the malicious activity will continue.
On the fact of checking the files on your hosting and eliminating the malicious code, please let us know in addition.
How to find this code? I deleted strange files from the hosting via ftp, but some appeared again! how to find the code itself?

Answer 1

Find out when the site was approximately infected, then search by date from that moment on, looking for new and modified files. On what cms it was possible to write your site right away. There are also utilities for finding and eliminating malicious code (ai-bolit for example), you can use them.