I received e-mails from Google saying that my websites are hacked. This is the e-mail.
Dear site owner or webmaster of domain.com (I received this email for my other domains too), We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information such as login credentials or banking information. We have removed the suspicious URLs from Google.com search results and have begun showing a warning page to users who visit these URLs in certain browsers that receive anti-phishing data from Google.
So I checked the web folders and I found in new folders with lots of folders in it.
Here are the folders
I have deleted all of them. Is there anything else should I do? Websites are Magento, Wordpress and HTML websites. Server is CentOS with Plesk 12.