Deleting plugins is not what I consider as proper way to solve the problem. I’ve written simple tool to help out in such situations WordPress Quick Plugin Manager.
It allows reviewing and setting plugin activation statuses without need to log into WordPress. This means one may deactivate and activate suspicious plugins even if he cannot log in to WordPress.
I quess it would be helpful to other too.