Remove Malicious content from Wordpress sites

I have five smaller sites on a shared webhost. Unfortunately, they got hacked and the webhost has disabled the sites. The webhost has sent instructions on what files have been infected and steps to handle it. I need help following the webhost instruction and possibly update WP plugins to get the sites up and running again. When it's done I need to use LocalWP to download the sites locally.