Plugin uninstalled but still detected by FPA - Joomla! Forum - community, help and support

hello,

i have upgraded site (on localhost) 2.5 3.3. when tried using [url="http://forum.joomla.org/viewtopic.php?f=621&t=582860"]the joomla forum post assistant[/url] (fpa) realized plugin had uninstalled still detected fpa. (i uninstalled plugin after upgrade.)
the plugin content templater , listed "plg_system_contenttemplater (4.2.0free)" fpa (see below).

i checked extension manager , plugin not there anymore, however.

wonder if there's wrong site has been infected malware when there's unusual, worry

thank in advance!

problem description :: forum post assistant (v1.2.4) : 6th february 2015 wrote:content templater plugin uninstalled still detected fpa

forum post assistant (v1.2.4) : 6th february 2015 wrote:

basic environment :: wrote:joomla! instance :: joomla! 3.3.6-stable (ember) 01-october-2014
joomla! platform :: joomla platform 13.1.0-stable (curiosity) 24-apr-2013
joomla! configured :: yes | writable (646) | owner: khue (uid: 1/gid: 1) | group: khue (gid: 1) | valid for: 3.3
configuration options :: offline: 0 | sef: 1 | sef suffix: 0 | sef rewrite: 1 | .htaccess/web.config: yes | gzip: 0 | cache: 1 | ftp layer: 0 | ssl: 0 | error reporting: default | site debug: 0 | language debug: 0 | default access: 1 | unicode slugs: 1 | database credentials present: yes

host configuration :: os: linux | os version: 3.13.0-37-generic | technology: x86_64 | web server: apache/2.4.7 (ubuntu) | encoding: gzip, deflate | doc root: /var/www/html | system tmp writable: yes

php configuration :: version: 5.5.9-1ubuntu4.5 | php api: apache2handler | session path writable: yes | display errors: | error reporting: 22527 | log errors to: | last known error: | register globals: | magic quotes: | safe mode: | open base: | uploads: 1 | max. upload size: 10m | max. post size: 8m | max. input time: 60 | max. execution time: 30 | memory limit: 128m

mysql configuration :: version: 5.5.41-0ubuntu0.14.04.1 (client:5.5.41) | host: --protected-- (--protected--) | collation: utf8_unicode_ci (character set: utf8) | database size: 206.00 mib | #of tables:  93

detailed environment :: wrote:php extensions :: core (5.5.9-1ubuntu4.5) | date (5.5.9-1ubuntu4.5) | ereg () | libxml () | openssl () | pcre () | zlib (2.0) | bcmath () | bz2 () | calendar () | ctype () | dba () | dom (20031129) | hash (1.0) | fileinfo (1.0.5-dev) | filter (0.11.0) | ftp () | gettext () | spl (0.2) | iconv () | mbstring () | session () | posix () | reflection ($id: 31d836a7ac92a37b5c580836d91ad4736fe2f376 $) | standard (5.5.9-1ubuntu4.5) | shmop () | simplexml (0.1) | soap () | sockets () | phar (2.0.2) | exif (1.4 $id$) | sysvmsg () | sysvsem () | sysvshm () | tokenizer (0.1) | wddx () | xml () | xmlreader (0.1) | xmlwriter (0.1) | zip (1.11.0) | apache2handler () | pdo (1.0.4dev) | json (1.3.2) | mysql (1.0) | mysqli (0.1) | pdo_mysql (1.0.2) | readline (5.5.9-1ubuntu4.5) | mhash () | zend opcache (7.0.3fe) | zend engine (2.5.0) |
potential missing extensions :: curl | mcrypt | suhosin |

switch user environment (experimental) :: php cgi: no | server su: no | php su: no | custom su (litespeed/cloud/grid): yes
potential ownership issues: no

apache modules :: core | mod_so | mod_watchdog | http_core | mod_log_config | mod_logio | mod_version | mod_unixd | mod_access_compat | mod_alias | mod_auth_basic | mod_authn_core | mod_authn_file | mod_authz_core | mod_authz_host | mod_authz_user | mod_autoindex | mod_deflate | mod_dir | mod_env | mod_filter | mod_mime | prefork | mod_negotiation | mod_php5 | mod_setenvif | mod_status | apache/2.4.7 (ubuntu) |
potential missing modules :: mod_rewrite | mod_expires | mod_security | mod_evasive | mod_dosevasive | mod_ssl | mod_qos | mod_userdir |

folder permissions :: wrote:core folders :: images/ (777) | components/ (777) | modules/ (777) | plugins/ (777) | language/ (777) | templates/ (777) | cache/ (777) | logs/ (777) | tmp/ (777) | administrator/components/ (777) | administrator/modules/ (777) | administrator/language/ (777) | administrator/templates/ (777) |

elevated permissions (first 10) :: components/ (777) | components/com_newsfeeds/ (777) | components/com_newsfeeds/helpers/ (777) | components/com_newsfeeds/models/ (777) | components/com_newsfeeds/views/ (777) | components/com_newsfeeds/views/categories/ (777) | components/com_newsfeeds/views/category/ (777) | components/com_newsfeeds/views/category/tmpl/ (777) | components/com_newsfeeds/views/newsfeed/ (777) | components/com_newsfeeds/views/newsfeed/tmpl/ (777) |

extensions discovered :: wrote:components :: site :: com_mailto (3.0.0) | com_wrapper (3.0.0) |
components :: admin :: com_templates (3.0.0) | com_cache (3.0.0) | com_joomlaupdate (3.0.0) | com_installer (3.0.0) | com_newsfeeds (3.0.0) | com_finder (3.0.0) | com_menus (3.0.0) | com_plugins (3.0.0) | com_media (3.0.0) | com_login (3.0.0) | com_checkin (3.0.0) | com_categories (3.0.0) | com_redirect (3.0.0) | com_postinstall (3.2.0) | com_search (3.0.0) | com_config (3.0.0) | com_weblinks (3.0.0) | com_messages (3.0.0) | com_modules (3.0.0) | com_contenthistory (3.2.0) | com_admin (3.0.0) | com_cpanel (3.0.0) | com_content (3.0.0) | com_languages (3.0.0) | com_users (3.0.0) | com_banners (3.0.0) | com_tags (3.1.0) | com_ajax (3.2.0) |

modules :: site :: mod_menu (3.0.0) | mod_whosonline (3.0.0) | mod_tags_popular (3.1.0) | mod_stats (3.0.0) | mod_random_image (3.0.0) | mod_articles_category (3.0.0) | mod_banners (3.0.0) | mod_footer (3.0.0) | mod_breadcrumbs (3.0.0) | mod_articles_popular (3.0.0) | mod_articles_news (3.0.0) | mod_articles_categories (3.0.0) | mod_syndicate (3.0.0) | mod_tags_similar (3.1.0) | mod_search (3.0.0) | mod_users_latest (3.0.0) | mod_weblinks (3.0.0) | mod_related_items (3.0.0) | mod_articles_archive (3.0.0) | mod_feed (3.0.0) | mod_languages (3.0.0) | mod_login (3.0.0) | mod_wrapper (3.0.0) | mod_custom (3.0.0) | mod_articles_latest (3.0.0) |
modules :: admin :: mod_title (3.0.0) | mod_toolbar (3.0.0) | mod_menu (3.0.0) | mod_popular (3.0.0) | mod_logged (3.0.0) | mod_quickicon (3.0.0) | mod_latest (3.0.0) | mod_multilangstatus (3.0.0) | mod_version (3.0.0) | mod_stats_admin (3.0.0) | mod_feed (3.0.0) | mod_submenu (3.0.0) | mod_status (3.0.0) | mod_login (3.0.0) | mod_custom (3.0.0) |

plugins :: site :: plg_captcha_recaptcha (3.0.0) | plg_search_contacts (3.0.0) | plg_search_newsfeeds (3.0.0) | plg_search_content (3.0.0) | plg_search_weblinks (3.0.0) | plg_search_tags (3.0.0) | plg_search_categories (3.0.0) | plg_content_vote (3.0.0) | plg_content_emailcloak (3.0.0) | plg_content_pagebreak (3.0.0) | plg_content_loadmodule (3.0.0) | plg_content_pagenavigation (3.0.0) | plg_content_joomla (3.0.0) | plg_content_finder (3.0.0) | plg_twofactorauth_yubikey (3.2.0) | plg_twofactorauth_totp (3.2.0) | plg_system_remember (3.0.0) | plg_system_sef (3.0.0) | plg_system_debug (3.0.0) | plg_system_logout (3.0.0) | plg_system_languagecode (3.0.0) | plg_system_languagefilter (3.0.0) | plg_system_log (3.0.0) | plg_system_contenttemplater (4.2.0free) | plg_system_cache (3.0.0) | plg_system_p3p (3.0.0) | plg_system_redirect (3.0.0) | plg_extension_joomla (3.0.0) | plg_user_contactcreator (3.0.0) | plg_user_profile (3.0.0) | plg_user_joomla (3.0.0) | plg_quickicon_joomlaupdate (3.0.0) | plg_quickicon_extensionupdate (3.0.0) | plg_editors-xtd_pagebreak (3.0.0) | plg_editors-xtd_readmore (3.0.0) | plg_editors-xtd_article (3.0.0) | plg_editors-xtd_image (3.0.0) | plg_editors_tinymce (4.1.2) | plg_editors_codemirror (3.15) | plg_installer_webinstaller (1.0.5) | plg_finder_tags (3.0.0) | plg_authentication_gmail (3.0.0) | plg_authentication_ldap (3.0.0) | plg_authentication_cookie (3.0.0) | plg_authentication_joomla (3.0.0) |

templates discovered :: wrote:templates :: site :: protostar (1.0) | ja_purity (1.2.0) | beez3 (3.1.0) | rhuk_milkyway (1.0.2) |
templates :: admin :: isis (1.0) | hathor (3.0.0) |

i using phpmyadmin (which separate web app, preinstalled , available via cpanel in every hosting account ever). (prefix)_extensions table , see if listed there. if had custom uninstall script crashed, or deleted folder manually without uninstalling via extensions manager, db entry still in (prefix)_extensions table.

ps: permissions security nightmare. third digit in unix permissions, should never 6 or 7. entire website "world writeable" meaning gets kind of account on same machine (is shared hosting?), can edit site files. based on doc root, guessing vps or other private server, alerted, bad permissions still bad news...