You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Great plugin! My blogsite was getting repeatedly infected. I paid $$$ to a self-proclaimed WordPress dev shop to get it cleaned. They took my money and claimed to have cleaned up my site but it got reinfected within hours after reinstallation. I then stumbled upon GOTMLS. I ran the plugin. It worked as advertised. 10 days later, my site is still free of infection (knock on wood!). Another thing I love about Eli S is the empathy and clarity in his communications. Anyone who is looking for a solution to a malware problem is not out on a walk in the park, to put it mildly. Unlike the brush-off tone used by many IT folks, Eli's comments totally speak to the user's state of mind. -- Ketharaman Swaminathan
A+++ Donated $29, 3x just now. Your software fixed my issue. Best $90 spent! -- a a