Malware inject php

Hello sir is there anyone can help me? I have cleared the script by using "sed" but I can not find the source or origin of the malware in because of the many files, is there any way I can find the source of the virus? So I can close the source of the malware, please mantuannya thank you

the best would be to use backup as malware can be in any script and any part of the file...so its very hard to remove it even if you have great linux knowledge.

but from the image you sent all before "return{" is part of the malware
Also you could prevent this by using security tools in cwp...info is on the wiki.