What to look for in mysql to unhack website

I have shared hosting and all of my WP installations have been hacked. All .js files have been addended with hexadecimal code, and tetqeq* files pop up in the root wp directory. t44.php hack file ends up in my hosting root also. I cant/dont have a full restore for all sites so im trying to fix via changes passwords, cleansing files, restoring wp-admin/wp-includes etc but i dont know how to clean my databases – that is IF they are even.

I’ll clean some installations and it comes right back, but others do not, so I dont know what to think.

I’ve since installed Sucuri and Wordfence to help with brute force attacks, modified files etc.

Any help would be awesome.