Remove any files or directories in your account for any files that you did not upload. The probability is your site was exploited in one of two ways; through an insecure application (file upload application, SQL injection, etc.) or via legitimate login gained by password sniffing or keylogging an infected home or business computer. It may be prudent at this point to do a thorough virus scan of your computer(s) to see if any viruses or malware are found. Here are links to a few free detection tools: - http://www.microsoft.com/security/malwareremove/default.mspx - http://vil.nai.com/vil/stinger/ - http://www.safer-networking.org/en/spybotsd/index.html You should immediately change your account password(s) in Control Panel: https://cp.Winhost.com, but make sure your computer is free from any keylogging or virus programs, or the password is likely to be compromised again.