Joomle is very huge security headache issue, also Joomle plugins are like security minefield …

are you sure your site wasn’t attacked and infested with some malware ?