recently we found phishing attack on our shared server Xene5   and most of the file s  clean as we found mostly wordpress sites are effected with following files you every one need to check his site carefully and clean these files and secure his data. public_html/wp-includes/IXR public_html/wp-includes/ID3 ...