Great post of how the security company ‘Sucuri’ approach infected websites and handle the huge scale of cleanups they perform within a single day (>400).

1. Establish a Baseline of the Environment
2. Identify Known Compromised Files
3. Identify Anomalies and Signs of Compromise
4. Check for Integrity Issues with Known Goods
5. Remove from Blacklists

Source: How Does Sucuri Clean Hacked Websites? – Sucuri Blog