Virus ? Nem sabia que existia... Como resolver ???

Olá acabo de instalar um Plugim em meu site : plg_iframe_1.5 acontece que ao terminar de instalar começaram meus problemas....

Não consigo mais salvar nenhum artigo. Quando coloco salvar sou direcionado apra outra Página : http://desarrollosocial.gob.hn/robots.php

Já tentei desinstalar o plugin mas o problema persiste, meu servidor não faz Backup dos sites e para variar eu também não ... Será que o problema está na pasta ADMINISTRATOR ? ou será que ele está no banco de dados ?

SErá que terei de refazer todo o site ? uso o 1.5 se eu migrar para uma versão mais atual será que o virus some ? Alguem sabe alguma solução ????

A está o Cód. dele

Arquivo PFP

<?php
/**
* @version $Id: mosiframe.php 2009-10-28 20:27
* @ Viet Nguyen Hoang - viet4777 - <!-- w -->[url=http://www.xahoihoctap.net" onclick="window.open(this.href);return false;]www.xahoihoctap.net[/url]<!-- w --> & <!-- w -->[url=http://www.luyenkim.net" onclick="window.open(this.href);return false;]www.luyenkim.net[/url]<!-- w --> $
* @package Joomla
* @subpackage Content
* @copyright Copyright (C) 2005 - 2007 Open Source Matters. All rights reserved.
* @license GNU/GPL, see LICENSE.php
* Joomla! is free software. This version may have been modified pursuant
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See COPYRIGHT.php for copyright notices and details.
*/
// Check to ensure this file is included in Joomla!
defined( '_JEXEC' ) or die();
jimport( 'joomla.event.plugin' );

$enabled = JPluginHelper :: isEnabled ('content','plg_iframe');
/**
* Content Plugin
*
* @package Joomla
* @subpackage Content
* @since 1.5
*/

class plgContentplg_iframe extends JPlugin
{
/**
* Constructor
*
* For php4 compatability we must not use the __constructor as a constructor for plugins
* because func_get_args ( void ) returns a copy of all passed arguments NOT references.
* This causes problems with cross-referencing necessary for the observer design pattern.
*
* @param object $subject The object to observe
* @param object $params The object that holds the plugin parameters
* @since 1.5
*/
function plgContentplg_iframe( &$subject, $params )
{
parent::__construct( $subject, $params );
//$this->_plugin =& JPluginHelper::getPlugin('content','plg_iframe');
//$this->params = new JParameter( $this->_plugin->params );
}

/**
* prepare content method
*
* Method is called by the view
*
* @param object The article object. Note $article->text is also available
* @param object The article params
* @param int The 'page' number
*/
function onPrepareContent( &$article, &$params, $limitstart )
{
// require_once( JURI::root(true).'/includes/domit/xml_saxy_lite_parser.php' );//xml_domit_lite_parser.php
//$live_site = JURI::base();

// Start IFRAME Replacement
// define the regular expression for the bot
$plugin =& JPluginHelper::getPlugin('content', 'plg_iframe');
$pluginParams = new JParameter( $plugin->params );

$regex = "#{iframe*(.*?)}(.*?){/iframe}#s";
$plugin_enabled = $pluginParams->get('enabled','1');
if($plugin_enabled=="0"){
$article->text = preg_replace($regex, '', $article->text);
}
else {
if (preg_match_all($regex, $article->text, $matches, PREG_SET_ORDER) > 0) {
$db =& JFactory::getDBO(); //Ket noi CSDL
$url = JRequest::getCmd('src'); //JRequest::getCmd

foreach ($matches as $match) {

$params0 = & JUtility::parseAttributes($match[1]);

$params0 = (@$params0)? $params0:$pluginParams->get( 'src', ' www.luyenkim.net ' );
if($url !='') {
if(strpos($url,'http://') == false)$params0 = 'http://'.$url;
}
//$params0 = filter_var($params0, FILTER_SANITIZE_URL);
$params0 = (@$params0)? $params0: $pluginParams->get( 'height', '400' );
$params0 = (@$params0)?$params0 : $pluginParams->get( 'width', '100%' );
$params0 = (@$params0)? $params0: $pluginParams->get( 'marginheight', '0' );
$params0 = (@$params0)?$params0 : $pluginParams->get( 'marginwidth', '0' );
$params0 = (@$params0)?$params0:$pluginParams->get( 'scrolling', '0' );
$params0 = (@$params0)?$params0 : $pluginParams->get( 'frameborder', '0' );
$params0 = (@$params0) ? $params0 : $pluginParams->get( 'align', 'bottom' );
$params0 = (@$params0) ? $params0 : $pluginParams->get( 'name', '' );
$params0 = (@$params0) ? $params0 : $pluginParams->get( 'noframes', '' );

if(@$match[2]) $url = $match[2]; else $url = $params0;
$url = strip_tags(rtrim(ltrim($url)));
$name = $params0;
$noframes = $params0;
unset($params0);
unset($params0);
unset($params0);

$article->text = preg_replace($regex, JHTML::iframe($url,$name,$params0,$noframes), $article->text, 1);
unset($params0);
}
}
// End IFRAME Replacement
}//end of else enable
} // End Function
} // End Class

Arquivo XML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE install SYSTEM " dev.joomla.org/xml/1.5/plugin-install.dtd"> ;
<install type="plugin" group="content" version="1.5">
<name>Content - Iframe Plugin</name>
<author>Nguyen Hoang Viet</author>
<creationDate>March 13rd, 2010</creationDate>
<copyright>This extension in released under the GNU/GPL License - http://www.gnu.org/copyleft/gpl.html </copyright>
<license> www.gnu.org/licenses/gpl-2.0.html GNU/GPL</license>
<authorEmail>email2@luyenkim.net</authorEmail>
<authorUrl>www.luyenkim.net</authorUrl>
<version>1.5</version>
<description><![CDATA[
mosIframe for Joomla! 1.5. Using: {iframe}your link{/iframe}, or {iframe width="500" hight="400" ...}your link{/iframe}<br />Other parameters: http://www.w3schools.com/TAGS/tag_iframe.asp
]]>
</description>
<files>
<filename plugin="plg_iframe">plg_iframe.php</filename>
</files>
<params>
<param name="enabled" type="radio" default="1" label="Enable Plugin" description="Enable pr Disable Plugin">
<option value="0">No</option>
<option value="1">Yes</option>
</param>
<param name="src" type="text" default="http://www.luyenkim.net" label="URL To Show" description="Type in the full URL like [url=http://www.abc.com" onclick="window.open(this.href);return false;]http://www.abc.com[/url]. Or relative url help/help.html" />
<param name="src_inurl" type="radio" default="0" label="Enable URL" description="Pass parameters to the iframe URL by adding parameters to the main site URL. src=your_link.">
<option value="0">No</option>
<option value="1">Yes</option>
</param>
<param name="width" type="text" default="100%" label="Frame Width" description="Type in the width of your frame in pixels or %." />
<param name="height" type="text" default="400" label="Frame Height" description="Type in the height of your frame in pixels." />
<param name="marginwidth" type="text" default="0" label="Margin Width" description="Type in the margin width of your frame in pixels." />
<param name="marginheight" type="text" default="0" label="Margin Height" description="Type in the margin height of your frame in pixels." />
<param name="frameborder" type="radio" default="0" label="Frameborder" description="Specifies whether or not to display a frame border.">
<option value="0">No</option>
<option value="1">Yes</option>
</param>
<param name="scrolling" type="radio" default="auto" label="Scroll bar" description="Define scroll bars.">
<option value="no">No</option>
<option value="yes">Yes</option>
<option value="auto">Auto</option>
</param>
<param name="align" type="list" default="bottom" label="Align" description="Specifies how to align the iframe according to the surrounding text">
<option value="left">Left</option>
<option value="right">Right</option>
<option value="top">Top</option>
<option value="middle">Middle</option>
<option value="bottom">Bottom</option>
</param>
<param name="@spacer" type="spacer" default="=== Search Engine Option ===" label="Extra Info" description="" />
<param name="name" type="text" default="plg_iframe" label="Name" description="Specifies a unique name of the iframe (to use in scripts)." />
<param name="noframes" type="textarea" rows="5" cols="30" default="No Frames" label="No Frames" description="Extra information - Helpful for Google. " />
</params>
</install>

Amigo a coisa ta feia pro seu lado...rsrs Vai na host e tenta apagar os arquivos do plugin, se não der certo, vai no admin do site e desabilita o plugin. Se não de certo mesmo é só outro site. E Troca de host.

ja tentei de tudo até pegar um antivirus de joomla eu peguei e instalei .. Mas agora o corno do virus tipo apagou o antivirus huauhauha