scan for additional files in joomla core folder structure

there should be no extraq files within certain folders of a jomla install. you should add a detection routine for these aditional files.

Also additional to this you could have a scan that maps the files on a healthy website and uses this as a comparrisiona against later scans for additional files which you can accept or not.