I don’t believe either of those files would be native to the wordpress package.
http://core.trac.ww.wp.xz.cn/browser/branches/3.1/wp-includes
they are not, I posted this so anyone who cared to could check their folder for the same files.
You should find out how those files got there. If you don’t close the security hole, you site will get reinfected again and again
I would like to know, any suggestions on how I would do that?
You might start by reviewing your access logs. Sometimes examining time stamps on corrupted files can give you an indicator as to the time frame you need to focus on. It sounds as if you already removed or altered the corrupted files, so that might no longer be as easy.
Examine the workstations you use to log into your ftp account and your wordpress dashboard. Make sure they are malware and virus free. Credential stealing trojans are not unheard of. Either way, you might consider it time for some password changes.
Examine your file and directory permissions for inappropriate settings. If you are on a shared server, do a little research into your hosting providers history in these matters, and consult their FAQ and support sections for proper permissions in a shared environment.
Exploits can also take up residence in your database. If you suffered from a hack in the past, just removing corrupted files and upgrading platforms may not be enough.
Examine your themes and plugins. Make sure they are up to date, are from trusted sources, and don’t utilize any obfuscation methods in their coding (at least none that you would not expect). Research any items that might be suspect for past known vulnerabilities, updates and security issues.
