I'm not sure if this is the proper forum, so let me know if it's not.

I have a website with 93 sub-domains. About a week ago my main site was hacked. My hosting provider was able to get me back on line but three of the sub-domains still have the hackers message rather than showing the site pages.

I have little faith in my hosting provider (I'm in the process of changing). Can someone tell me where and what to look for to get things back on track?

The message that appears is different on each page:

- www.golf.tellmeaboutthat.com (Az3ar hacker was here - PALESTINE HACKER [email protected])
- www.lawofattraction.tellmeaboutthat.com (Az3ar hacker palestine hacke was eerereher)
- www.biz-net.tellmeaboutthat.com (Az3ar hacker was here - PALESTINE HACKER )

I use cPanel for editing and the sites are in a pHp format. Normally I go to pages.php to edit the page but I don't know what I'm looking for.