Hi everybody.
We were infected by a very invasive malicious code redirecting to letsmakeparty3.ga around july 8th 2020. The 15 wordpress sites of our shared hosting are infected.
We don’t know how to react because it’s very invasive and comes back instantly, as described here : Cleaner scripts by Guillaume Muh
This malware replaced all our “</head>” occurences with it’s malicious code, and maybe much more, even the databases.
We have two main requests :
1. Can we urgently block the domain redirection via htaccess or anything else ?
2. What procedure would you advise us to fix our websites, since 1 remaining line of malicious code infects all the hosting ?
We are a bit lost and afraid to be honest 
Thanks for your help.
