Some Chaneese hack wordpress

Hi,

1-2 week ago some sb hacked my wordpress.
I dont’t know how, but uploaded ssh-terminal do wp-admin and sent manu files to sending lot of emails.

Please check this!

What I do?
– delete all wiles from wp-admin and wp-includes and upload new
– check all folders in wp-content and delete all strange files
– install htpasswd to this folders and block by apachce access from ip

Please think about repair bug!