Вирус на сайте ! js:Redirector-PB [Trj] - страница 2 - Безопасность сайтов на Joomla

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
   <system.webServer>
       <rewrite>
           <rules>
               <rule name="Joomla! Rule 1" stopProcessing="true">
                   <match url="^(.*)$" ignoreCase="false" />
                   <conditions logicalGrouping="MatchAny">
                       <add input="{QUERY_STRING}" pattern="base64_encode[^(]*\([^)]*\)" ignoreCase="false" />
                       <add input="{QUERY_STRING}" pattern="(&gt;|%3C)([^s]*s)+cript.*(&lt;|%3E)" />
                       <add input="{QUERY_STRING}" pattern="GLOBALS(=|\[|\%[0-9A-Z]{0,2})" ignoreCase="false" />
                       <add input="{QUERY_STRING}" pattern="_REQUEST(=|\[|\%[0-9A-Z]{0,2})" ignoreCase="false" />
                   </conditions>
                   <action type="CustomResponse" url="index.php" statusCode="403" statusReason="Forbidden" statusDescription="Forbidden" />
               </rule>
               <rule name="Joomla! Rule 2">
                   <match url="(.*)" ignoreCase="false" />
                   <conditions logicalGrouping="MatchAll">
                     <add input="{URL}" pattern="^/index.php" ignoreCase="true" negate="true" />
                     <add input="{URL}" pattern="/component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$" />
                     <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
                     <add input="{REQUEST_FILENAME}" matchType="IsDirectory" ignoreCase="false" negate="true" />
                   </conditions>
                   <action type="Rewrite" url="index.php" />
               </rule>
           </rules>
       </rewrite>
   </system.webServer>
</configuration>

Sheel and Basic Backdoor Script Finder www.1000in1.net

File: /home/cp033251/public_html/administrator/components/com_ninjaxplorer/include/fun_ftpauthentication.php
String:: $_POST[

File: /home/cp033251/public_html/administrator/components/com_ninjaxplorer/include/js_admin.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_ninjaxplorer/include/javascript.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_ninjaxplorer/include/fun_list.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_akeeba/views/buadmin/view.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_swmenupro/ImageManager/Classes/ImageManager.php
String:: $_POST[

File: /home/cp033251/public_html/administrator/components/com_swmenupro/admin.swmenupro.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_aicontactsafe/views/attachments/view.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_xmap/ajaxResponse.php
String:: $_POST[

File: /home/cp033251/public_html/administrator/components/com_jcomments/admin.jcomments.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_jcomments/admin.jcomments.php
String:: $_POST[

File: /home/cp033251/public_html/administrator/components/com_content/admin.content.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_joomlapack/views/buadmin/view.html.php
String:: confirm(

File: /home/cp033251/public_html/administrator/components/com_joomlapack/helpers/sajax.php
String:: $_POST[

File: /home/cp033251/public_html/administrator/components/com_trash/admin.trash.html.php
String:: confirm(

File: /home/cp033251/public_html/modules/mod_reformal/joomla/elements/verific.php
String:: eval(base64_decode

File: /home/cp033251/public_html/modules/mod_reformal/joomla/elements/newfile.php
String:: eval(base64_decode

File: /home/cp033251/public_html/kickstart.php
String:: $_POST[

File: /home/cp033251/public_html/plugins/content/captcha_systems/secureimage/securimage.php
String:: $_POST[

File: /home/cp033251/public_html/plugins/content/captcha_systems/securImage2/securimage.php
String:: $_POST[

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/imgmanager_ext/classes/phpthumb/phpthumb.functions.php
String:: phpinfo()

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/imgmanager_ext/classes/phpthumb/phpthumb.class.php
String:: $_POST[

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/spellchecker/rpc.php
String:: $_POST[

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/rj_insertcode/geshi/geshi/thinbasic.php
String:: NCC

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/rj_insertcode/geshi/geshi/csharp.php
String:: WebControls

File: /home/cp033251/public_html/plugins/editors/jce/tiny_mce/plugins/rj_insertcode/php/rj_common.php
String:: $_POST[

File: /home/cp033251/public_html/components/com_aicontactsafe/models/message.php
String:: phpinfo()

File: /home/cp033251/public_html/components/com_mailto/controller.php
String:: $_POST[

File: /home/cp033251/public_html/components/com_jcomments/tpl/default/tpl_comment.php
String:: confirm(

File: /home/cp033251/public_html/libraries/joomla/html/toolbar/button/confirm.php
String:: confirm(

File: /home/cp033251/public_html/libraries/joomla/environment/request.php
String:: $_POST[

Done