Remove Malware from PHP Scripts

Hi all,

I was approached by an old friend yesterday and he wants me to migrate his 5 sites to my servers. The problem is, his shared server had been hacked 5 times in last 6 months and every time there is some code injection in his PHP scripts.

I'm afraid if I just migrate his sites to my server, any injected malware may "open" backdoors and compromise the whole server.

I know the solutions to clean Wordpress sites, but I seek guidance in cleaning static HTML & Core PHP Scripts which (May) have been injected with malware. One of the site is a a full suite with front-end & Backend coded in Core PHP (6-7 years back), with around 90-95 .php files, is there are practical solution to get these scanned & cleaned?

I've done Clamscan which reported nothing, but I can't rely on it alone.

I found this on a quick search http://ift.tt/1wG9LqT

can you point me to some more Reliable and Trusted ones please ?

Thanks alot...

http://ift.tt/1dvHQ0Z