Magpleasure/Filesystem extension

Magpleasure/Filesystem extension is Magento extension aimed to help with access to file management directly from Magento Backend. It is a simple lightweigh filemanager accessible directly from Backend for admin users.
It was massively used by attackers after Shoplift vulnerability to upload malicious files from Backend once they injected Magento admin user and logged into Magento with it.


When installed, it is accessible in Backend from System > Filesystem > IDE menu as shown on screenshot above.

If you have not specifically installed this extension, the chances are that your store was compromised. Refer to Magento recovery after Shoplift vulnerability for details.

To disable the extension, change <active> tag from true to false in app/etc/modules/Magpleasure_Filesystem.xml:

--- app/etc/modules/Magpleasure_Filesystem.xml
+++ app/etc/modules/Magpleasure_Filesystem.xml 
@@ -2,7 +2,7 @@
 <config>
     <modules>
         <Magpleasure_Filesystem>
-            <active>true</active>
+            <active>false</active>
             <codePool>community</codePool>
         </Magpleasure_Filesystem>
     </modules>

or simply uninstall it via Magento Connect Manager.