/plus/90sec.php recent remark The Trojan is very tenacious
1 The latest patches should be uploaded and repaired.
2 "/plus/90sec.php" background is to be able to remove the antivirus, but after a period of time again, the instructions did not clear clean, after the/data/directory of/data/cache and/data/tplcache/have a lot of abnormal files (background virus scan not to sweep) And the background of the custom macro tags; add a new one to two new tags, seemingly with this Trojan related estimate is to use these to survive the reason, suggest you hurriedly delete, otherwise the light delete that PHP is not possible, even if the upgrade patch is useless.
Delete the entries in the background-> template-> Custom macro tags (if you haven't done this before, all suggestions are deleted)
Empty the contents of/data/cache/and/data/tplcache/
A folder that deletes features that are not available to your site
3 can also download the latest version of the Dream system, empty the next data and plus Dede upload the latest three folders (carefully consider)
4 Set the Plus and data directory properties to read-only
For the time being, I don't know if there are any other abnormal files that remain.