been hacked

I need to go over the directory structure. I had some files added to an un familiar folder..

Under wp-admin, should there be folders network and user ??

The phishing files where found in user

The only recent plugin has been yoast..