GD来信说我的空间有恶意文件，我该咋找？

topname

Regarding your hosting account 123.com.
During the course of our security monitoring our security team identified malicious files located in your hosting account. We have removed these files or restored them to unaffected backups as appropriate and our security team has addressed the method by which they were created in order to protect your site. If you are currently experiencing any unexpected behavior on your website we are available 24 hours a day, 365 days a year to assist you anytime. You can reach us by phone at (480) 505-8877.

两封邮件，都是说我的空间里有恶意文件，不过他们解决了。但是

1、我是新装的wordpress，出没几天，连搜索引擎都还没收呢，咋就被恶意了呢？
2、我该怎么做才可以知道恶意文件的位置、文件名？
3、有好一些的防护方法吗？作为新人，我该注意些什么？

谢谢大家！

add.c

删除文件重新安装新的版本吧. 另外注意有些模板可能被挂了马

goldstein

尽量用官方版本，一些修改版本身就暗藏木马，一放出去肉鸡就是现成的。

就像什么番茄花园XP之流一样，明明百毒缠身，愚民们还热烈支持。