Also i didnt upload this: http://xxxxxxx/.smileysNeither file is malicious; the first is from the site builder, and the second is a server file that auto-creates if it's missing. In this case, it's blank, so it doesn't do anything; many CMS's do use the .htaccess file though, so erasing it is not recommended unless something's seriously broken, and even then I only recommend renaming it to .htaccess.bak to confirm it's not the cause of the problem. The first one can be safely erased, but it may come back if you use the site builder again.