Does }__ appear in your logs? All versions of all branches of Joomla prior to I ...

Hogg on Aug 30, 2016 | parent | context | favorite | on: Hacked: Investigating an Intrusion on My Server

Does }__ appear in your logs? All versions of all branches of Joomla prior to I think 3.4.6 had a problem with serialization that allowed arbitrary PHP execution.