Only 6 sites..
All word press sites
We do not have backup
All use the same theme - I think most avada
Hacker put [url removed, login to view] in each directory of word press!
We think best option is
1. Rename or remove each rogue [url removed, login to view] file the put
2. or save the files that we customize for site( make sure clean)
reinstall theme and bring back the files..
We need it fixed asap if you can by an expert
see sites we need attached
Budget $100-$150 +/-