Multiple Compromised Sites Cleanup?

Hi, One of our server facing issues of compromised accounts, most of the websites got infected with kind of malware Files getting added automatically starts sendings emails or they redirect first time visitor's to the unknown website url. I tried to scan the server with clamav but no luck. Is there any free tool available to clean these shits?