My server has been hacked with many malicious .php files having been created sending out spam in the wp-content, wp-incl