Nexevo Contact Form, Backdoor
Resolution: update to 1.0.2
Users should also check for the existence of a plugin called System - Section among their installed extensions. It is malware and needs to be removed and the site treated as hacked. Further information here: https://vel.joomla.org/articles/2167-nexevo-contact-form
Update notice: http://www.nexevo.in/security-release-announcement.html
.