Clean infected server urgently

My server has been compromised, I have a self managed host provider which suggests me to hire someone to solve the issue, the webpages are not working due to an abuse block from the host, they told me the server is infected. I need to work along with someone with knowledge on WHM, CPanel, servers. to determine which files can be erased and how to reinstall a clean server. This are the instructions from the host: Mario, The server definitely has been compromised and has malicious content on it, including the files for an Eggdrop bot. I have enabled the IP so you can SSH in from your current IP. The files I am talking about are in /home/heliboss/public_html/shell These are all I've found so far, but some of them might be legitimate. You will need to login and look at the files to see if you recognize any of them. Best Regards, Travis West System Administrator Mario, You login either via SSH or FTP and look at the files. I cannot do this for you since I don't know what files you have that are legitimate vs what is malicious. Since this is your server the onus is on you to know what files you have uploaded/installed. This really is a job for your System Administrator, which we are not. If you want my professional opinion, this server needs to be reinstalled completely. And since some of the files I can tell are plainly malicious were uploaded back on December 21, 2017, if you don't want to reinstall, you would need to restore at the very least, the two accounts I mentioned from backups taken prior to 12/17/17. Best Regards, Travis West