Step 1: Deleting malware files

Step 2: Fixing storage .htaccess files

Step 3: Checking permissions

/storage → 0755
/storage/app → 0755
/storage/app/public → 0755
/storage/app/public/uploads → 0755
avm-emblem.png → 0644

Step 4: Image test

(rewrite path)
(direct path)